Webcam 115 Unquoted Service Path Patched [upd] | Active

He pushed the patch to the entire fleet. One by one, the red warnings turned green. The malicious Program.exe

This is the (CWE-428).

If a service path is defined as: C:\Program Files\Active Webcam\WebcamService.exe active webcam 115 unquoted service path patched

While the patch closes the primary vector, security researchers have noted:

Exploiting an unquoted service path relies heavily on weak folder permissions (Access Control Lists or ACLs). 1. Enumeration He pushed the patch to the entire fleet

reg add "HKLM\SYSTEM\CurrentControlSet\Services\ActiveWebcamService" /v ImagePath /t REG_EXPAND_SZ /d "\"C:\Program Files (x86)\Active Webcam\SimvWebcam.exe\"" /f Use code with caution. 3. Verification of the Patch

"C:\Program Files\Active Webcam\awservice.exe" active webcam 115 unquoted service path patched

C:\Program Files\Active WebCam\WebCam.exe