Unquoted service paths in Intel Quartus II in versions 11.0 - 15.0 allow a local malicious user to potentially execute arbitrary code.
intel quartus ii