[O9A]

SandboxEscaper (Twitter alias) released a new Windows zero day which takes advantage of the "MsiAdvertiseProduct" function of Windows that’s responsible for generating "an advertise script or advertises a product to the computer and enables the installer to write to a script the registry and shortcut information used to assign or publish a product."

Source: https://thehackernews.com/2018/12/window...ploit.html

Video: https://youtu.be/x4P2H64GI1o

PoC: https://drive.google.com/file/d/1fMuDp1R...5Xtds/view

Twitter: https://twitter.com/Evil_Polar_Bear/stat...1105767424