Unquoted Service Path Vulnerability in EA's Dragon Age Origins

CVE-2024-57276

What is CVE-2024-57276?

In Dragon Age Origins version 1.05, a vulnerability exists within the DAUpdaterSVC service due to an unquoted service path. This misconfiguration permits users with lower privileges to alter the executable file path related to the service. Consequently, an attacker could insert a malicious executable in the service path. Since the service operates under NT AUTHORITY\SYSTEM privileges, successfully executing such a malicious executable could lead to unauthorized privilege escalation, compromising the system's integrity.

References