Mohamed Alzhrani

**Name of the Vulnerable Software and Affected Versions** Wondershare Dr.Fone version 12.0.18 **Description** Wondershare Dr.Fone version 12.0.18 contains an unquoted service path issue. This allows local users to execute arbitrary code with elevated system privileges. The misconfigured service path can be exploited to insert malicious code that will be executed with LocalSystem permissions during service startup. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.