| 标题 | Google Earth Pro v7.3.4.8642 - DLL Hijacking |
|---|
| 描述 | Title: Google Earth Pro v7.3.4.8642 - DLL Hijacking PoC
Date: 07/09/2022
Author: MrEmpy
Vendor Homepage: https://www.google.com/
Software Link: https://www.google.com.br/earth/
Version: 7.3.4.8642
Tested on: Windows
Title:
================
Google Earth Pro v7.3.4.8642 - DLL Hijacking PoC
Summary:
================
Google Earth Pro version 7.3.4.8642 is vulnerable to a DLL Hijacking attack by exchanging a DLL in the software's main directory. DLL swapping can lead a malicious user to arbitrarily execute malicious code.
This vulnerability is considered a day 0 fault, as it was discovered recently and the company responsible for the software was not notified or aware of this issue.
Affected Product:
================
Google Earth Pro v7.3.4.8642
Proof of Concept:
================
There is a video demonstrating the attack. The video doesn't show in detail, because as mentioned above, this flaw was discovered recently and the company that owns the software doesn't know this weakness.
https://www.youtube.com/watch?v=YGOWlIXf5-0 |
|---|
| 来源 | ⚠️ https://www.google.com.br/earth/ |
|---|
| 用户 | mrempy (UID 24379) |
|---|
| 提交 | 2022-09-07 15時30分 (4 年前) |
|---|
| 管理 | 2022-09-16 07時14分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 208721 [Google Earth Pro 7.3.4.8642 于 Windows 权限提升] |
|---|
| 积分 | 20 |
|---|