delphi4arab منتديات دلفي للعرب

Prevx Freezer - Prevx releases v 3.05.206 and old was affected.

Concept:
This application tries to create (if not exists) "%AppData%\PrevxCSI\csidb.csi" file,
and change the file attributes to READ ONLY.

Result: ACCESS DENIED When Prevx tries to handle "csidb.csi" file.

Tested sucessfully on: Windows (Xp, Vista and Seven) X86 and X64 platforms.

IMPORTANT: Vulnerability published only for educational purposes.


Tests:
1- If Prevx is already installed, install the Exploit and reboot your PC.
2- If Prevx is not installed,install the Exploit and try to install Prevx.

Status: Vendor notified