ELAN Touchpad 15.2.13.1_X64_WHQL – ‘ETDService’ Unquoted Service Path

Exploit Database
16 阅读

作者： SamAlucard

日期： 2021-03-23
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49702/

# Exploit Title: ELAN Touchpad 15.2.13.1_X64_WHQL - 'ETDService' Unquoted Service Path
# Exploit Author : SamAlucard
# Exploit Date: 2021-03-22
# Vendor :ELAN Microelectronics
# Version : ELAN Touchpad 15.2.13.1_X64_WHQL
# Vendor Homepage : http://www.emc.com.tw/
# Tested on OS: Windows 8

#This software installs EDTService.exe, version 11.10.2.1

#Analyze PoC :
==============
C:\>sc qc ETDService
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: ETDService
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files\Elantech\ETDService.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : Elan Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
ELAN Touchpad 15.2.13.1_X64_WHQL – ‘ETDService’ Unquoted Service Path的更多信息

Linux Kernel (x86) – Memory Sinkhole Privilege Escalation：
Offset2lib – Bypassing Full ASLR On 64 bit Linux：
AVS Audio Converter 9.1.2.600 – Stack Overflow (PoC)：
Acoustica MP3 Audio Mixer 2.471 – Extended .M3U Directives (SEH)：
Cemu 1.6.4b – Information Leak / Buffer Overflow (Emulator Breakout)：
NCH Express Invoice – Clear Text Password Storage and Account Takeover：
Iperius Remote 1.7.0 – Unquoted Service Path Privilege Escalation：
Rosoft Audio Converter 4.4.4 – Local Buffer Overflow：