CVE-2017-5873

Affected product: Unisys s-Par (guest service). Vulnerability: Unquoted Windows search path in the guest service before 4.4.20 can allow local privilege escalation via a Trojan horse executable in %SYSTEMDRIVE% (e.g., program.exe). Exploitation status: not detailed in the provided documents; Open...