MEMU PLAY 3.7.0 – ‘MEmusvc’ Unquoted Service Path

Exploit Database
16 阅读

作者： SamAlucard

日期： 2020-11-09
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49016/

#Exploit Title: MEMU PLAY 3.7.0 - 'MEmusvc' Unquoted Service Path
#Exploit Author : SamAlucard
#Exploit Date: 2020-11-07
#Vendor : Microvirt
#Version : Microvirt MEMU 3.7.0
#Vendor Homepage :https://www.memuplay.com/
#Tested on OS: Windows 10 Home

#Analyze PoC :
==============

C:\Users\Sam Sanz>sc qc "MEmusvc"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: MEmusvc
TIPO : 10WIN32_OWN_PROCESS
TIPO_INICIO: 2 AUTO_START
CONTROL_ERROR: 1 NORMAL
NOMBRE_RUTA_BINARIO: C:\Program Files\Microvirt\MEmu\MemuService.exe
GRUPO_ORDEN_CARGA:
ETIQUETA : 0
NOMBRE_MOSTRAR : MEmusvc
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

last Exploits
MEMU PLAY 3.7.0 – ‘MEmusvc’ Unquoted Service Path的更多信息

Oracle Solaris Common Desktop Environment 1.6 – Local Privilege Escalation：
OpenSLP 2.0.0 – Multiple Vulnerabilities：
DVD X Player 5.5.3 – ‘.plf’ Buffer Overflow：
Microsoft Windows 7 (x86) – ‘afd.sys’ Dangling Pointer Privilege Escalation (MS14-040)：
WM Downloader 2.9.2 – Local Stack Buffer Overflow：
Foxit Reader 3.0 – Open Execute Action Stack Buffer Overflow (Metasploit)：
Mozilla Firefox 3.6.8 – ‘dwmapi.dll’ DLL Hijacking：
Alreader 2.5 .fb2 – Based Stack Overflow (SEH) (ASLR + DEP Bypass)：