[hot] - Active Webcam 115 Unquoted Service Path Patched

OpenTimestamps aims to be a standard format for blockchain timestamping.

Stamp & Verify

Drop here a file to stamp
OR
an .ots proof file to verify


The hash is calculated on your browser preserving your privacy. More...
Timestamping proof download will start automatically after uploading document.


[hot] - Active Webcam 115 Unquoted Service Path Patched

Are you checking for that might have this same issue? Share public link

The vendor has resolved the issue by properly quoting the service binary path:

Ensuring that unquoted service paths are remediated is a critical component of maintaining system security and enforcing the principle of least privilege.

wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v "c:\windows\\" |findstr /i /v """ Use code with caution. Copied to clipboard Step 2: Apply the Registry Patch Open regedit.exe as an . active webcam 115 unquoted service path patched

The developer updated the installer logic to ensure proper string encapsulation. Modern installers use explicit quote escaping when writing to the Windows Registry.

This article provides a comprehensive deep‑dive into the vulnerability, explaining what an unquoted service path is, how CVE‑2021‑47790 can be exploited, the full impact of the flaw, and most importantly, the mitigation steps that administrators and users must take now that a patch is available.

wmic service get name,displayname,pathname,startmode | findstr /i "Active" Use code with caution. Are you checking for that might have this same issue

Because the path contains a space (between “Program” and “Files”) and another space (between “Active” and “WebCam”), Windows will attempt to locate the binary by interpreting each space as a possible path separator. The order of resolution is:

Active Webcam is a popular software solution by Pysoft used for video surveillance and security camera management. In version 11.5 (and potentially earlier iterations), the software was discovered to contain a classic Windows configuration vulnerability known as an Unquoted Service Path .

Understanding the Vulnerability: Active Webcam 115 Unquoted Service Path Copied to clipboard Step 2: Apply the Registry

Security analysts can audit networks for remaining unquoted service paths using a simple built-in Windows Management Instrumentation (WMI) query:

This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later.

C:\Program Files\Active Webcam\webcam115.exe

Calendars

The following are the, free to use, default calendars used by OpenTimestamps. They rely on donations to reduce maintainers efforts, they accept bitcoin and some accept lightning network payments. Check the calendars uptime.
 

Alice

Bob

Finney

Catallaxy

Members

Repositories

Client

Client tool to perform stamping of files through a calendar server and to verify OpenTimestamps proof

opentimestamps-client

Server

Calendar Server receiving timestamp request from clients

opentimestamps-server

Python

Common library

python-opentimestamps

Javascript

Common library & Client tool

javascript-opentimestamps

Java

Common library & Client tool

java-opentimestamps

Rust

Rust library

rust-opentimestamps