AnyTXT Searcher 1.2.394 – ‘ATService’ Unquoted Service Path

Exploit Database
12 阅读

作者： Mohammed Alshehri

日期： 2021-02-09
类别：
- local
平台：
- windows
来源：https://www.exploit-db.com/exploits/49549/

# Exploit Title: AnyTXT Searcher 1.2.394 - 'ATService' Unquoted Service Path
# Date: 2020-12-11
# Exploit Author: Mohammed Alshehri
# Vendor Homepage: Anytxt.net
# Software Link: https://sourceforge.net/projects/anytxt/files/AnyTXT.Searcher.1.2.394.exe
# Version: Version 1.2.394
# Tested on: Microsoft Windows 10 Education - 10.0.17763 N/A Build 17763


# Service info:
C:\Users\m507>sc qc ATService
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: ATService
TYPE : 110WIN32_OWN_PROCESS (interactive)
START_TYPE : 2 AUTO_START(DELAYED)
ERROR_CONTROL: 1 NORMAL
BINARY_PATH_NAME : C:\Program Files (x86)\AnyTXT Searcher\atservice.exe
LOAD_ORDER_GROUP :
TAG: 0
DISPLAY_NAME : AnyTXT Searcher Indexing Service
DEPENDENCIES :
SERVICE_START_NAME : LocalSystem

C:\Users\m507>

last Exploits
AnyTXT Searcher 1.2.394 – ‘ATService’ Unquoted Service Path的更多信息

Light Alloy 4.7.3 – ‘.m3u’ Local Buffer Overflow (SEH Unicode)：
Microsoft Word – Local Machine Zone Code Execution (MS15-022)：
HTMLDOC 1.9.x-r1629 (Windows x86) – ‘.html’ Local Buffer Overflow：
Proxifier for Mac 2.18 – Multiple Vulnerabilities：
Imperva SecureSphere 11.5 / 12.0 / 13.0 – Privilege Escalation：
Stud_PE 2.6.05 – Local Stack Overflow：
DigitalPersona 4.5.0.2213 – ‘DpHostW’ Unquoted Service Path：
XAMPP 8.2.4 – Unquoted Path：