Check Point ZoneAlarm 8.8.1.110 – Local Privilege Escalation

Exploit Database
40 阅读

作者： Chris Anastasio

日期： 2019-01-17
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/46189/

# Exploit Title: Check Point ZoneAlarm Local Privilege Escalation
# Date: 1/16/19
# Exploit Author: Chris Anastasio
# Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/
# Software Link: Vulnerable Versions included in repo
# Version:
ZoneAlarm Free Antivirus + Firewall version: 15.3.064.17729
Vsmon version: 15.3.58.17668
Driver version: 15.1.29.17237
Antivirus engine version: 8.8.1.110
Antivirus signature DAT file version: 1297458144
# Tested on: Windows 7/Windows 10
# Vendor Disclosure: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142952

POC:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46189.zip

last Exploits
Check Point ZoneAlarm 8.8.1.110 – Local Privilege Escalation的更多信息

AVS Audio Converter 10.3 – Stack Overflow (SEH)：
Blizzard Update Agent – JSON RPC DNS Rebinding：
Ricoh Printer Drivers – Local Privilege Escalation：
Microsoft Windows MSHTML Engine – ‘Edit’ Remote Code Execution：
Palo Alto Networks PanOS – ‘root_trace’ Local Privilege Escalation：
BitRaider Streaming Client 1.3.3.4098 – Local Privilege Escalation：
Workspace ONE Intelligent Hub 20.3.8.0 – ‘VMware Hub Health Monitoring Service’ Unquoted Service Path：
Rapid7 AppSpider 6.12 – Local Privilege Escalation：