Hejap Zairy

**Name of the Vulnerable Software and Affected Versions** Malwarebytes version 4.5 **Description** An unquoted service path issue exists in the `MBAMService` executable. This allows local attackers to escalate privileges by injecting malicious code into the system root path. Attackers can place executable files in unquoted path directories that execute with LocalSystem privileges during service startup or system reboot. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Audio Conversion Wizard version 2.01 **Description** Audio Conversion Wizard version 2.01 contains a buffer overflow issue. An attacker can execute arbitrary code by providing a specially crafted registration code that overwrites memory. This can lead to remote code execution by exploiting a constructed input buffer. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cobian Backup version 0.9 **Description** A local user can execute arbitrary code with elevated system privileges. This is due to an unquoted service path in the `CobianReflectorService`, allowing attackers to inject malicious code that executes with LocalSystem permissions during service startup. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider modifying the service path to include quotes to prevent malicious code execution.