Unquoted path or search item vulnerability in SugarSync versions before 4.1.3 for Windows. This misconfiguration could allow an unauthorized local user to inject arbitrary code into the unquoted service path, resulting in privilege escalation.
Vulmon