| 제목 | Google Earth Pro v7.3.4.8642 - DLL Hijacking |
|---|
| 설명 | Title: Google Earth Pro v7.3.4.8642 - DLL Hijacking PoC
Date: 07/09/2022
Author: MrEmpy
Vendor Homepage: https://www.google.com/
Software Link: https://www.google.com.br/earth/
Version: 7.3.4.8642
Tested on: Windows
Title:
================
Google Earth Pro v7.3.4.8642 - DLL Hijacking PoC
Summary:
================
Google Earth Pro version 7.3.4.8642 is vulnerable to a DLL Hijacking attack by exchanging a DLL in the software's main directory. DLL swapping can lead a malicious user to arbitrarily execute malicious code.
This vulnerability is considered a day 0 fault, as it was discovered recently and the company responsible for the software was not notified or aware of this issue.
Affected Product:
================
Google Earth Pro v7.3.4.8642
Proof of Concept:
================
There is a video demonstrating the attack. The video doesn't show in detail, because as mentioned above, this flaw was discovered recently and the company that owns the software doesn't know this weakness.
https://www.youtube.com/watch?v=YGOWlIXf5-0 |
|---|
| 원천 | ⚠️ https://www.google.com.br/earth/ |
|---|
| 사용자 | mrempy (UID 24379) |
|---|
| 제출 | 2022. 09. 07. PM 03:30 (4 연령 ago) |
|---|
| 모더레이션 | 2022. 09. 16. AM 07:14 (9 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 208721 [Google Earth Pro 7.3.4.8642 켜짐 Windows 권한 상승] |
|---|
| 포인트들 | 20 |
|---|