CVE-2017-7643

Related Files

Proxifier 2.19 Privilege Escalation / Code Execution

Posted Apr 12, 2017

Authored by Mark Wadham

Proxifier version 2.19 introduced a kext signature verification to the KLoader binary as a fix for CVE-2017-7643 but Proxifier.app performs no verification of the KLoader binary that gets executed as root.

tags | exploit, root

advisories | CVE-2017-7643

SHA-256 | 36b64d6583f82f0faba0e74037d1b6ae26b4edc361fd2e029c46e9d3918f1e85

Download | Favorite | View

Proxifier 2.18 Privilege Escalation / Code Execution

Posted Apr 11, 2017

Authored by Mark Wadham

Proxifier versions 2.18 and below ships with a KLoader binary which it installs suid root the first time Proxifier is run. This binary serves a single purpose which is to load and unload Proxifier's kernel extension. Unfortunately it does this by taking the first parameter passed to it on the commandline without any sanitisation and feeding it straight into system().

tags | exploit, kernel, root

advisories | CVE-2017-7643

SHA-256 | 9b8b34ade86fd0c30d6b7d8dfaf9fb267c4e58b5f840ccbd7c58c08f2342b5d9

Download | Favorite | View