CVE-2018-6546 PoC — AMD驱动程序安装包和Gaming Evolved产品plays.tv服务安全漏洞

Source

https://github.com/securifera/CVE-2018-6546-Exploit

Associated Vulnerability

Title: AMD驱动程序安装包和Gaming Evolved产品plays.tv服务安全漏洞 (CVE-2018-6546)
Description:plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, executes code at a user-defined (local or SMB) path as SYSTEM when the execute_installer parameter is used in an HTTP message. This occurs without properly authenticating the user.

Description

CVE-2018-6546-Exploit

Readme

CVE-2018-6546 POC Exploit
=====

This is a proof of concept exploit for version 1.27.5.0 and prior of the Plays.tv service(plays_service.exe).

More details about the vulnerabilities can be found at:

https://www.securifera.com/advisories/cve-2018-6546/

https://www.securifera.com/blog/2018/04/15/amd-gaming-evolved-raptr-plays-tv-remote-file-execution/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →