Software cube Trusted Program execution vulnerability

With the soft-media cube to the notebook to find the system, in fact, this software is very useful, but some details do not enough. Before the vulnerability box has been submitted, in fact, this hole is very chicken, the real use of this loophole may be very few. Version number: Soft magic cube 6.1.3.0 official version of the vulnerability trigger: Create a Program.exe in the C-disk, open the Software Magic Cube, the program will first execute the Program.exe, click on the application in the encyclopedia can also trigger. Vulnerability reason: Call the WindowsAPI function CreateProcess, the first parameter is NULL, the second argument contains a space, and no double quotation marks. Exploit: can be used to boot up to load malicious programs, Trojans.

Software cube Trusted Program execution vulnerability