(1/3)π¨Deepening CVE-2019-2215 #exploit used by #APT36π¨
c37d7cc1ef250ef62240211fae775f964c2ac1c09c58594730425aec0fda04d8
Set #SELinux to Permissive, give root shell for arbitrary code exec due to a use-after-free vuln.
Sample is c/o @ShadowChasing1
c37d7cc1ef250ef62240211fae775f964c2ac1c09c58594730425aec0fda04d8
Set #SELinux to Permissive, give root shell for arbitrary code exec due to a use-after-free vuln.
Sample is c/o @ShadowChasing1
https://twitter.com/ShadowChasing1/status/1302782100660080642?s=20
(2/3) Abused in other malicious apps like:
0294f46d0e8cb5377f97b49ea3593c25
e7e96236fb596828afd968d124b4308f
66bb354965c1c4214bf39b4ea11e1d6e
96cfa2cb99f7c6ebe1cb0333f2e47645
26b7096a6db9f4fae31722f455c03ee0
5f563a38e3b98a7bc6c65555d0ad5cfd
0294f46d0e8cb5377f97b49ea3593c25
e7e96236fb596828afd968d124b4308f
66bb354965c1c4214bf39b4ea11e1d6e
96cfa2cb99f7c6ebe1cb0333f2e47645
26b7096a6db9f4fae31722f455c03ee0
5f563a38e3b98a7bc6c65555d0ad5cfd
(3/3) Fully inspired to the PoC published by #projectzero years ago...
πππ
https[://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885
πππ
https[://bugs.chromium.org/p/project-zero/issues/attachmentText?aid=414885
β’ β’ β’
Missing some Tweet in this thread? You can try to
force a refresh
γ
