A local privilege escalation vulnerability in Remote Mouse allows attackers to execute arbitrary code with administrative privileges by exploiting an unquoted service path.

The application utilizes an unquoted service path for the RemoteMouseService, which fails to encapsulate the path in quotation marks. This allows a local attacker with standard privileges to place a malicious executable in the service path, which the system will execute with LocalSystem privileges upon service startup.

Successful exploitation of this vulnerability results in full system compromise, as the attacker gains the highest level of privileges available on the host machine. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to unauthorized data access, the installation of persistent malware, or complete system takeover. Organizations relying on this software must address this risk to prevent lateral movement or total loss of host integrity.

Immediate Action: Update to the latest version of Remote Mouse provided by the vendor, or if a patch is unavailable, manually correct the service path configuration in the Windows Registry to use proper quotation marks.

Proactive Monitoring: Monitor Windows Event Logs for unexpected service creation or modifications to the RemoteMouseService configuration.

Compensating Controls: Restrict local write access to the C:\Program Files (x86)\ directory to prevent unprivileged users from planting malicious executables in potential service paths.

Public Exploit Available: Yes, an ExploitDB entry (EDB-ID 50258) exists for this vulnerability.

This vulnerability presents a significant risk to endpoint security by enabling local privilege escalation. Security teams should prioritize identifying all instances of Remote Mouse within their environment and applying the necessary configuration changes or updates immediately to eliminate the unquoted service path flaw. Failure to remediate this issue leaves affected systems vulnerable to full administrative compromise by any local user.