CVE-2023-31747

This is a writeup describing an unquoted service path vulnerability in Wondershare NativePush (Build 1.0.0.7) as part of Filmora 12, leading to local privilege escalation. The service 'NativePushService' runs with SYSTEM privileges and is vulnerable due to an unquoted path, allowing local users to replace the executable and escalate privileges.

This PoC demonstrates an unquoted service path vulnerability in Wondershare Filmora, allowing local privilege escalation to SYSTEM by exploiting the service's executable path. The exploit involves placing a malicious executable in a directory that Windows will search due to the unquoted path.