{"id":2269,"date":"2018-10-25T12:53:52","date_gmt":"2018-10-25T01:53:52","guid":{"rendered":"https:\/\/techsuccess.com.au\/?p=2269"},"modified":"2018-10-26T11:47:52","modified_gmt":"2018-10-26T00:47:52","slug":"hacker-reveals-new-zero-day-windows-exploit-via-twitter-post","status":"publish","type":"post","link":"https:\/\/techsuccess.com.au\/hacker-reveals-new-zero-day-windows-exploit-via-twitter-post\/","title":{"rendered":"Hacker Reveals New Zero-Day Windows Exploit Via Twitter Post!"},"content":{"rendered":"<p><strong>He has\u00a0done it again. Two months ago a &#8220;security researcher&#8221; who goes by the Twitter alias @SandBoxEscaper publicly dropped a <span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/techsuccess.com.au\/new-zero-day-vulnerability-affecting-all-versions-of-windows\/\">zero-day exploit<\/a> <\/span>which showed a vulnerability residing within the Microsoft Jet Database Engine which allows an attacker to remotely execute malicious code on any vulnerable windows computer. Yesterday @SandboxEscaper did it again by releasing another proof-of-concept exploit for a new Windows zero-day vulnerability.<\/strong><\/p>\n<p>SandBoxEscaper has <a href=\"https:\/\/twitter.com\/SandboxEscaper\/status\/1054744201244692485\"><span style=\"color: #0000ff;\">posted<\/span><\/a> a <span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/github.com\/SandboxEscaper\/randomrepo\/blob\/master\/DeleteBug1.rar\">link to a Github<\/a><\/span> page hosting a proof-of-concept (PoC) exploit for the vulnerability that appears to be a privilege escalation flaw residing in Microsoft Data Sharing (dssvc.dII). This data sharing service runs as a LocalSystem account that provides brokering between applications\u00a0whilst also giving extensive privileges.<\/p>\n<p><a href=\"https:\/\/twitter.com\/SandboxEscaper\/status\/1054744201244692485\"><img loading=\"lazy\" class=\"wp-image-2272 aligncenter\" src=\"https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post-300x210.jpg\" alt=\"sandboxescaper twitter post\" width=\"497\" height=\"348\" srcset=\"https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post-300x210.jpg 300w, https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post-600x420.jpg 600w, https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post-768x538.jpg 768w, https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post-1024x717.jpg 1024w, https:\/\/techsuccess.com.au\/wp-content\/uploads\/2018\/10\/sandboxescaper-twitter-post.jpg 1223w\" sizes=\"(max-width: 497px) 100vw, 497px\" \/><\/a><\/p>\n<p>The Data Sharing Service (DSS) provides data brokering between applications along with a local service that runs as LocalSystem account with extensive privileges.<\/p>\n<p>&nbsp;<\/p>\n<div class='code-block code-block-1' style='margin: 8px 0; clear: both;'>\n<script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js\"><\/script>\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block; text-align:center;\"\r\n     data-ad-layout=\"in-article\"\r\n     data-ad-format=\"fluid\"\r\n     data-ad-client=\"ca-pub-9316027855386654\"\r\n     data-ad-slot=\"9311389174\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n\n<p>&nbsp;<\/p>\n<h3>Why Should I Be Worried?<\/h3>\n<p>This flaw will allow a low-privileged attacker to elevate privileges on a target system, though the PoC exploit code (deletebug.exe) released by the &#8220;researcher&#8221; only allows a low privileged user to delete critical system files &#8211; that otherwise would only be possible via admin level privileges.<\/p>\n<blockquote><p>&#8220;Not the same bug I posted a while back, this doesn&#8217;t write garbage to files but actually deletes them.. meaning you can delete application dll&#8217;s and hope they go look for them in user write-able locations. Or delete stuff used by system services c:\\windows\\temp and hijack them,&#8221; the researcher wrote.<\/p><\/blockquote>\n<p>There is one positive (sort of) this vulnerability does not affect later versions of Windows operating systems including 7 or 8.1.\u00a0&#x1f44f;&#x1f44f;&#x1f44f;&#x1f44f;&#x1f44f;<\/p>\n<p>This PoC exploit has successfully been tested against\u00a0fully-patched Windows 10 systems:<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p dir=\"ltr\" lang=\"en\">Confirmed as well on Win10 1803, fully-patched as of October.<br \/>\nIt&#8217;s perhaps worth noting that the service used by the PoC, Data Sharing Service (dssvc.dll), does not seem to be present on Windows 8.1 and earlier systems. <a href=\"https:\/\/t.co\/W8cNNC4xYO\">https:\/\/t.co\/W8cNNC4xYO<\/a><\/p>\n<p>\u2014 Will Dormann (@wdormann) <a href=\"https:\/\/twitter.com\/wdormann\/status\/1054801400910307328?ref_src=twsrc%5Etfw\">October 23, 2018<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\nNot only has SandBoxEscaper leaked a second Windows zero-day vulnerability in less than two months, but this irresponsibility has also once again left all Windows users vulnerable to hackers until the next month&#8217;s security patch Tuesday, which is scheduled for November 13 2018.<\/p>\n<p>If you need assistance please <span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"mailto:diogo@techpatrol.com.au\">contact us<\/a><\/span> as soon as possible.<\/p>\n<p>&nbsp;<\/p>\n<p>Other Articles That May Interest You:<\/p>\n<ul>\n<li><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/techsuccess.com.au\/microsoft-fixes-critical-vulnerability-in-october-patch-release\/\">Microsoft Fixes Critical Vulnerability In October Patch Release<\/a><\/span><\/li>\n<li><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/techsuccess.com.au\/tech-patrol-becomes-an-authorized-microsoft-device-distributor\/\" target=\"_blank\" rel=\"noopener\">Tech Patrol Becomes an Authorised Microsoft &#8216;Device&#8217; Distributor<\/a><\/span><\/li>\n<li><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/techsuccess.com.au\/what-is-managed-services-and-how-can-it-help-businesses\/\" target=\"_blank\" rel=\"noopener\">What Is Managed Services and How Can It Help Businesses?<\/a><\/span><\/li>\n<li><span style=\"color: #0000ff;\"><a style=\"color: #0000ff;\" href=\"https:\/\/techsuccess.com.au\/services\/it-managed-services\/managed-services-prices\/\" target=\"_blank\" rel=\"noopener\">Managed Services Prices<\/a>\u00a0(Page)<\/span><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>He has\u00a0done it again. Two months ago a &#8220;security researcher&#8221; who goes by the Twitter alias @SandBoxEscaper publicly dropped a zero-day exploit which showed a vulnerability residing within the Microsoft Jet Database Engine which allows an attacker to remotely execute malicious code on any vulnerable windows computer. Yesterday @SandboxEscaper did it again by releasing another &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/techsuccess.com.au\/hacker-reveals-new-zero-day-windows-exploit-via-twitter-post\/\"> <span class=\"screen-reader-text\">Hacker Reveals New Zero-Day Windows Exploit Via Twitter Post!<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":6,"featured_media":2296,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[35],"tags":[26,69,112,79,127,22,20,8,136],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/posts\/2269"}],"collection":[{"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/comments?post=2269"}],"version-history":[{"count":0,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/posts\/2269\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/media\/2296"}],"wp:attachment":[{"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/media?parent=2269"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/categories?post=2269"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsuccess.com.au\/wp-json\/wp\/v2\/tags?post=2269"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}