CVE-2014-0759 in Floating License Manager
Summary
by MITRE
Unquoted Windows search path vulnerability in Schneider Electric Floating License Manager 1.0.0 through 1.4.0 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 05/28/2026
The vulnerability described in CVE-2014-0759 represents a critical unquoted search path weakness affecting Schneider Electric Floating License Manager versions 1.0.0 through 1.4.0. This flaw resides in the Windows operating system's path resolution mechanism where applications fail to properly quote directory paths during execution, creating opportunities for privilege escalation attacks. The vulnerability specifically targets the way Windows resolves executable paths when spaces are present in directory names, a common occurrence in legitimate software installations.
The technical implementation of this vulnerability stems from improper handling of path strings in the license manager's execution environment. When a Windows application searches for executables in a path containing spaces, the operating system may interpret the path incorrectly if it is not properly quoted. This misinterpretation occurs because Windows treats spaces as delimiters between separate path components, allowing attackers to place malicious executables in directories that match the initial portion of the intended path. The vulnerability is classified as a CWE-428 weakness, which specifically addresses the failure to quote search paths, making it susceptible to path injection attacks.
The operational impact of this vulnerability is significant as it enables local users to achieve privilege escalation through a well-crafted Trojan horse application. Attackers can create malicious executables with names that match the initial substring of a legitimate path containing a space, thereby gaining elevated privileges when the system attempts to execute what it believes to be a legitimate program. This attack vector directly maps to the ATT&CK technique T1068, which covers privilege escalation through the exploitation of system vulnerabilities. The vulnerability essentially allows attackers to execute code with the privileges of the target application, potentially leading to complete system compromise.
The attack scenario typically involves an attacker placing a malicious executable in a directory that shares a common prefix with a legitimate application path containing spaces. When the license manager attempts to execute a program, Windows resolves the path incorrectly due to the unquoted search path, executing the attacker's malicious code instead of the intended legitimate program. This vulnerability is particularly dangerous because it requires no special privileges to exploit, as the attack leverages the legitimate system's path resolution behavior. The affected Schneider Electric software represents a common target for such attacks due to its potential to run with elevated privileges in enterprise environments.
Mitigation strategies for CVE-2014-0759 involve proper path quoting in all executable references, ensuring that directory paths containing spaces are properly enclosed in quotation marks. System administrators should implement the principle of least privilege and regularly audit application installations for proper path handling. The recommended approach includes updating to patched versions of Schneider Electric Floating License Manager, implementing application whitelisting controls, and conducting regular security assessments of Windows applications for similar path resolution vulnerabilities. Additionally, organizations should enforce security policies that prevent local users from creating executables in directories that may be included in system search paths, thereby reducing the attack surface for such privilege escalation techniques.