CVE-2018-6384

NSClient++ (before 0.4.1.73) contains an Unquoted Windows search path vulnerability that allows non-privileged local users to execute arbitrary code with elevated privileges via a malicious program.exe placed in the %SYSTEMDRIVE% directory. Root cause: an unquoted system path can be exploited to ...