An unquoted Windows search path vulnerability existed in...
High severity
Unreviewed
Published
Jul 3, 2023
to the GitHub Advisory Database
•
Updated Apr 11, 2024
Description
Published by the National Vulnerability Database
Jul 3, 2023
Published to the GitHub Advisory Database
Jul 3, 2023
Last updated
Apr 11, 2024
An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install service (mvagtsce.exe).
The misconfiguration allowed an unauthorized local user to insert arbitrary code into the unquoted service path to obtain privilege escalation and stop antimalware services.
References