+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: Sandbox Escaper Releases new Windows Zero Day (/Thread-Sandbox-Escaper-Releases-new-Windows-Zero-Day)
Sandbox Escaper Releases new Windows Zero Day - O9A - 12-22-2018
SandboxEscaper (Twitter alias) released a new Windows zero day which takes advantage of the "MsiAdvertiseProduct" function of Windows that’s responsible for generating "an advertise script or advertises a product to the computer and enables the installer to write to a script the registry and shortcut information used to assign or publish a product."
Source: https://thehackernews.com/2018/12/windows-zero-day-exploit.html
Video: https://youtu.be/x4P2H64GI1o
PoC: https://drive.google.com/file/d/1fMuDp1Rqy4oUrM3W7r3ika03Y9-5Xtds/view
Twitter: https://twitter.com/Evil_Polar_Bear/status/1075605011105767424