Reganam 3GP Player 4.7.0 Library privileges management

Summaryinfo

A vulnerability classified as problematic was found in Reganam 3GP Player 4.7.0. This affects an unknown part of the component Library Handler. The manipulation results in privileges management. Additionally, an exploit exists.

Detailsinfo

A vulnerability was found in Reganam 3GP Player 4.7.0. It has been classified as problematic. Affected is an unknown function of the component Library Handler. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was released 09/23/2016 by ZwX as VL-ID 1955 as not defined advisory (Website). The advisory is shared for download at vulnerability-lab.com. The exploitability is told to be easy. The attack needs to be approached locally. The successful exploitation requires a authentication. Technical details are unknown but a public exploit is available. The MITRE ATT&CK project declares the attack technique as T1068.

A public exploit has been developed by ZwX in C++ and been published immediately after the advisory. The exploit is shared for download at vulnerability-lab.com. It is declared as proof-of-concept. The code used by the exploit is:

#include <windows.h>
#define DllExport __declspec (dllexport)

BOOL WINAPI DllMain (
HANDLE hinstDLL,
DWORD fdwReason,
LPVOID lpvReserved)
{
dll_hijack();
return 0;
}

int dll_hijack()
{
MessageBox(0, "DLL Hijacking By ZwX!", "DLL Message", MB_OK);
return 0;
}

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Reganam

Name

• 3GP Player

Version

• 4.7.0

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion