0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Nexon Games - Unquoted Path Privilege Escalation
[----------------------------------------------------------------------------------------------------------------- # Exploit Title: Multiples Nexon Games - Privilege Escalation Unquoted path vulnerabilities # Date: 13/05/2016 # Exploit Author : Cyril Vallicari # Vendor Homepage: http://www.nexon.net/ # Softwares Links: http://dirtybomb.nexon.net/ (DirtyBomb) # http://store.steampowered.com/app/273110/ (CSNZ) # Versions: Dirty Bomb r56825 USA_EU / CSNZ : 0.0.18845.1 # Tested on: Windows 7 x64 SP1 (but it should works on all windows version) Description : Multiples Nexon Game, including but not limited to Dirty Bomb and Counter-Strike Nexon : Zombies, are Prone to unquoted path vulnerability. They fail to quote correctly the command that call for BlackXcht.aes, which is a part of the anti-cheat system (Nexon Game Security). Probably all Nexon games calling this file are affected. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. POC : Put a software named Program.exe in C: Launch the game via steam When BlackXcht.aes is called, Program.exe is executed with same rights as steam POC video : https://www.youtube.com/watch?v=wcn62GGwtcQ Patch : Patch for Dirty bomb - Upgrade to r57457 USA_EU # 0day.today [2025-01-07] #