Slashdot Mirror
New Windows Zero-Day Bug Helps Delete Any File, Exploit Available (bleepingcomputer.com)
An anonymous reader quotes a report from Bleeping Computer: Proof-of-concept code for a new zero-day vulnerability in Windows has been released by a security researcher before Microsoft was able to release a fix. The code exploits a vulnerability that allows deleting without permission any files on a machine, including system data, and it has the potential to lead to privilege escalation. The vulnerability could be used to delete application DLLs, thus forcing the programs to look for the missing libraries in other places. If the search reaches a location that grants write permission to the local user, the attacker could take advantage by providing a malicious DLL.
The problem is with Microsoft Data Sharing Service, present in Windows 10, Server 2016 and 2019 operating systems, which provides data brokering between applications. Will Dormann, a vulnerability analyst at CERT/CC, tested the exploit code successfully on a Windows 10 operating system running the latest security updates. Behind the discovery is a researcher using the online alias SandboxEscaper, also responsible for publicly sharing in late August another security bug in Windows Task Scheduler component. Microsoft hasn't addressed the issue, but there is a temporary fix available through the oPatch platform. "A micropatch candidate was ready seven hours after the zero-day vulnerability announcement, and it blocked the exploit successfully," reports Bleeping Computer. "oPatch now delivers the stable version of the micropatch for fully updated Windows 10 1803.
The problem is with Microsoft Data Sharing Service, present in Windows 10, Server 2016 and 2019 operating systems, which provides data brokering between applications. Will Dormann, a vulnerability analyst at CERT/CC, tested the exploit code successfully on a Windows 10 operating system running the latest security updates. Behind the discovery is a researcher using the online alias SandboxEscaper, also responsible for publicly sharing in late August another security bug in Windows Task Scheduler component. Microsoft hasn't addressed the issue, but there is a temporary fix available through the oPatch platform. "A micropatch candidate was ready seven hours after the zero-day vulnerability announcement, and it blocked the exploit successfully," reports Bleeping Computer. "oPatch now delivers the stable version of the micropatch for fully updated Windows 10 1803.
Linux
The problem is with Microsoft...
Could have just stopped right there.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
... to remove those Win10 applications that Microsoft forbids you to remove?
What's the CVE for this exploit?
Or did the "security researcher" not disclose this to anyone before releasing it?
Isn't the easier method just to install the October release of Windows 10?
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
Ya, it's called the 2018 Windows 10 October Update :-)
It must have been something you assimilated. . . .
SandboxEscaper - isnt this the guy Microsoft refused to pay up (under bug bounty program) for previous privilege elevation bug found? bad move MS.
Who logs in to gdm? Not I, said the duck.