CVE-2016-20057

Name of the Vulnerable Software and Affected Versions NETGATE Registry Cleaner version 16.0.205

Description The NGRegClnSrv service contains an unquoted service path, which occurs when a service path contains spaces and is not enclosed in quotation marks, allowing the operating system to potentially execute a different file. A local attacker can exploit this by placing a malicious executable within the unquoted path and triggering a service or system restart to execute arbitrary code with LocalSystem privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.