sheed AntiVirus 2.3 contains an unquoted service path vulnerability in the ShavProt service that allows local attackers to escalate privileges by exploiting the…

CVE-2016-20061 affects Sheed AntiVirus 2.3, containing an unquoted service path vulnerability in the ShavProt service. Local attackers can exploit this vulnerability to escalate privileges by inserting a malicious executable in the unquoted path. When the service restarts or system reboots, the malicious code executes with LocalSystem privileges. This vulnerability allows for privilege escalation attacks on systems running the affected antivirus software. The vulnerability has been documented with proof-of-concept exploits available.