Intel Audio Service 01.00.1080.0 Unquoted Service Path

0

[ad_1]

Intel Audio Service version 01.00.1080.0 suffers from an unquoted service path vulnerability.

MD5 | 1832bae6f7375ed5c911255279576ec0
# Exploit Title: Intel(R) Audio Service x64 01.00.1080.0 - 'IntelAudioService' Unquoted Service Path
# Date: 06-01-2021
# Exploit Author: Geovanni Ruiz
# Vendor Homepage: //www.intel.com
# Software Version: 01.00.1080.0
# File Version: 1.00.1080.0
# Tested on: Microsoft® Windows 10 Home Single Language 10.0.19042 x64 es
# Vulnerability Type: Unquoted Service Path

# 1. To find the unquoted service path vulnerability

C:>wmic service where 'name like "%IntelAudioService%"' get name, displayname, pathname, startmode, startname

DisplayName Name PathName StartMode StartName
Intel(R) Audio Service IntelAudioService C:WINDOWSsystem32cAVSIntel(R) Audio ServiceIntelAudioService.exe Auto LocalSystem

# 2. To check service info:

C:>sc qc "IntelAudioService"
[SC] QueryServiceConfig CORRECTO

NOMBRE_SERVICIO: IntelAudioService
TIPO : 10 WIN32_OWN_PROCESS
TIPO_INICIO : 2 AUTO_START
CONTROL_ERROR : 1 NORMAL
NOMBRE_RUTA_BINARIO: C:WINDOWSsystem32cAVSIntel(R) Audio ServiceIntelAudioService.exe
GRUPO_ORDEN_CARGA :
ETIQUETA : 0
NOMBRE_MOSTRAR : Intel(R) Audio Service
DEPENDENCIAS :
NOMBRE_INICIO_SERVICIO: LocalSystem

# 3. Exploit:

To exploit this vulnerability an attacker requires drop a malicious executable into the service path undetected by the OS in order
to gain SYSTEM privileges.



[ad_2]

Source link

Leave a comment