Her researchers ESET recently discovered and analyzed an exploit for an "0day" attack technique in a highly targeted Eastern European attack.
The exploit was based on the use of a Local Privilege Escalation (LPE) vulnerability in the Microsoft Windows operating system. ESET immediately reported the issue to the Microsoft Security Response Center, which in turn fixed the vulnerability and issued a patch.
Only some limited versions of Windows are affected by this exploit, as in Windows 8 and later, a user process cannot connect to σελίδα NULL, a parameter that is necessary for the attack to start and succeed.
The specific vulnerability Win32kWindows .sys, like the others, uses the pop-up menu.
“For example, in the LPE attack by exploiting the Sednit team that we analyzed 2017 was used objects menu and exploit techniques, which are very similar to the current exploit," explains ESET researcher Anton Cherepanov, who discovered the recent vulnerability.
The vulnerability (CVE-2019-1132) affects the following operating systems: Windows 7 Service Pack 1 for 32-bit systems, Windows 7 Service Pack 1 for x64-edition systems, Windows Server 2008 Service Pack 2 for 32-bit systems, Windows Server 2008 Service Pack 2 for Itanium-based systems, Windows Server 2008 Service Pack 2 for x64 edition systems, Windows Server 2008 R2 Service Pack 1 for Itanium-based systems, and Windows Server 2008 R2 Service Pack 1 for x64 edition systems.
Windows XP and Windows Server 2003 are also affected, but these versions are not supported by Microsoft.
"Users who are still using Windows 7 Service Pack 1 should consider upgrading to new operating systems as extended support for Windows 7 Service Pack 1 is due to expire on January 14. This means that Windows 2020 users will not receive critical security updates, ”adds Cherepanov.
More technical details about the "0day" exploit can be found in the article The CVE-2019-1132 vulnerability used in targeted attack at WeLiveSecurity.com.
_________________
- ICS Forth more about the hack of Greek domains gr & el
- How to Make Your Own Rescue Disk With Windows PE
- LanguageTool free grammar and spell check
