ZDI Has released details for unpatched zero day vulnerability in the Microsoft Windows JET Database engine vulnerability which affects all windows versions
Root Cause:
The root cause of this issue resides in the Microsoft JET Database Engine. Microsoft patched two other issues in JET in the September Patch Tuesday updates. While the patched bugs are listed as buffer overflows, this additional bug is actually an out-of-bounds write, which can be triggered by opening a Jet data source via OLEDB.
How To Exploit:To trigger this vulnerability, a user would need to open a specially crafted file containing data stored in the JET database format. Various applications use this database format. An attacker using this would be able to execute code at the level of the current process.
POC:
Here is the link of github that contains the POC
How to protect:
1. Use updated security software restrict
2. Do not open files from untrusted source
Root Cause:
The root cause of this issue resides in the Microsoft JET Database Engine. Microsoft patched two other issues in JET in the September Patch Tuesday updates. While the patched bugs are listed as buffer overflows, this additional bug is actually an out-of-bounds write, which can be triggered by opening a Jet data source via OLEDB.
How To Exploit:To trigger this vulnerability, a user would need to open a specially crafted file containing data stored in the JET database format. Various applications use this database format. An attacker using this would be able to execute code at the level of the current process.
POC:
Here is the link of github that contains the POC
How to protect:
1. Use updated security software restrict
2. Do not open files from untrusted source
No comments:
Post a Comment