unquoted strings vulnerability

  1. Locating unquoted strings in Services with spaces in the path

    A little background. Each running service has corresponding registry entries. One in particular, ImagePath contains the command executed when a service starts. It is a moderate vulnerability when the ImagePath is not quoted. What can happen is an attacker can make the service execute any...