Proxifier 2.18 Privilege Escalation / Code Execution
Posted by deepcore on April 13, 2017 – 5:28 am
Proxifier versions 2.18 and below ships with a KLoader binary which it installs suid root the first time Proxifier is run. This binary serves a single purpose which is to load and unload Proxifier’s kernel extension. Unfortunately it does this by taking the first parameter passed to it on the commandline without any sanitisation and feeding it straight into system().
Post a reply
You must be logged in to post a comment.