+- delphi4arab منتديات دلفي للعرب (https://delphi4arab.net/forum)
+-- قسم : منتديات دلفي الأخرى (https://delphi4arab.net/forum/forumdisplay.php?fid=4)
+--- قسم : الامن و تحليل التطبيقات البرمجية (https://delphi4arab.net/forum/forumdisplay.php?fid=31)
+--- الموضوع : Prevx ACCESS DENIED Exploit (/showthread.php?tid=2460)
Prevx ACCESS DENIED Exploit - STRELiTZIA - 03-10-2010
السلام عليكم و رحمة الله
الخطأ بسيط جدا و الثغرة كبيرة في حق برنامج الحماية Prevx
تغيير خاصية ملف واحد من ملفات برنامج الحماية الى القراءة فقط تجعله يدور في حلقة مفرغة.
Prevx Freezer - Prevx releases v 3.05.206 and old was affected.
Concept:
This application tries to create (if not exists) "%AppData%\PrevxCSI\csidb.csi" file,
and change the file attributes to READ ONLY.
Result: ACCESS DENIED When Prevx tries to handle "csidb.csi" file.
Tested sucessfully on: Windows (Xp, Vista and Seven) X86 and X64 platforms.
IMPORTANT: Vulnerability published only for educational purposes.
Tests:
1- If Prevx is already installed, install the Exploit and reboot your PC.
2- If Prevx is not installed,install the Exploit and try to install Prevx.
Status: Vendor notified
Concept:
This application tries to create (if not exists) "%AppData%\PrevxCSI\csidb.csi" file,
and change the file attributes to READ ONLY.
Result: ACCESS DENIED When Prevx tries to handle "csidb.csi" file.
Tested sucessfully on: Windows (Xp, Vista and Seven) X86 and X64 platforms.
IMPORTANT: Vulnerability published only for educational purposes.
Tests:
1- If Prevx is already installed, install the Exploit and reboot your PC.
2- If Prevx is not installed,install the Exploit and try to install Prevx.
Status: Vendor notified