CVE-2016-20085

Name of the Vulnerable Software and Affected Versions Realtek High Definition Audio Driver version 6.0.1.6730

Description An unquoted service path issue exists, allowing local attackers to escalate privileges. By placing a malicious executable file within the unquoted service path and restarting the service, an attacker can execute arbitrary code with LocalSystem privileges. An unquoted service path occurs when a service path contains spaces and is not enclosed in quotation marks, allowing the operating system to potentially execute a different file located earlier in the path.

Recommendations Update Realtek High Definition Audio Driver to a version newer than 6.0.1.6730.