Her researchers ESET recently discovered and analyzed an exploit for an "0day" attack technique in a highly targeted Eastern European attack.
The exploit was based on the use of a Local Privilege Escalation (LPE) vulnerability in the operating system of Microsoft Windows. ESET immediately reported the issue to Microsoft's Security Response Center, which in turn patched the vulnerability and issued a patch.
Only some limited versions of Windows are affected by this exploit, as in Windows 8 and later, a user process cannot connect to σελίδα NULL, a parameter that is necessary for the attack to start and succeed.
The specific Windows Win32k.sys vulnerability, like the others, uses the popup menu.
“For example, in the LPE attack by exploiting the Sednit team that we analyzed 2017 menu items and exploitation techniques were used, much like the current exploit, ”explains ESET researcher Anton Cherepanov, who discovered the recent vulnerability.
Vulnerability (CVE-2019-1132) affects the following operating systems: Windows 7 Service Pack 1 for 32-bit systems, Windows 7 Service Pack 1 for x64 versions, Windows Server 2008 Service Pack 2 for 32-bit systems, Windows Server 2008 Service Pack 2 for Itanium-based systems, Windows Server 2008 Service Pack 2 for x64-based systems, Windows Server 2008 R2 Service Pack 1 for Itanium-based systems, and Windows Server 2008 R2 Service Pack 1 for x64 version systems.
Windows XP and Windows Server 2003 are also affected, but these versions are not supported by Microsoft.
"Users still using Windows 7 Service Pack 1 should consider upgrading to new operating systems, as extended support for Windows 7 Service Pack 1 is set to end on January 14, 2020. This means that users of Windows 7 they will not receive critical updates security” adds Cherepanov.
More technical details about the "0day" exploit can be found in the article The CVE-2019-1132 vulnerability used in targeted attack at WeLiveSecurity.com.
_________________
- ICS Forth more about the hack of Greek domains gr & el
- How to Make Your Own Rescue Disk With Windows PE
- LanguageTool free grammar and spell check
