Exploit Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation

[Exploiter]

EDB-ID

46189

Проверка EDB

1. Пройдено

Автор

CHRIS ANASTASIO

Тип уязвимости

LOCAL

Платформа

WINDOWS

CVE

N/A

Дата публикации

2019-01-17

Check Point ZoneAlarm 8.8.1.110 - Local Privilege Escalation

# Exploit Title: Check Point ZoneAlarm Local Privilege Escalation
# Date: 1/16/19
# Exploit Author: Chris Anastasio
# Vendor Homepage: https://www.zonealarm.com/software/free-antivirus/
# Software Link: Vulnerable Versions included in repo
# Version:
ZoneAlarm Free Antivirus + Firewall version: 15.3.064.17729
Vsmon version: 15.3.58.17668
Driver version: 15.1.29.17237
Antivirus engine version: 8.8.1.110
Antivirus signature DAT file version: 1297458144
# Tested on: Windows 7/Windows 10
# Vendor Disclosure: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk142952

POC:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/46189.zip