CVE-2020-9767 PoC — Zoom Sharing Service 代码问题漏洞

Source

https://github.com/shubham0d/Zoom-dll-hijacking

Associated Vulnerability

Title: Zoom Sharing Service 代码问题漏洞 (CVE-2020-9767)
Description:A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release.

Description

A dll hijacking vulnerability in zoom meeting < 5.1.4. CVE-2020-9767

Readme

# Zoom-dll-hijacking
A dll hijacking vulnerability in zoom meeting &lt; 5.1.3 
<br />
### Affected Windows version
* Windows 7 or less
* Windows Server 2008
* Any other windows system that doesn't have `SHCore.dll` present.

### Usage
* Copy the `dbghelper.dll` and `SHCore.dll` to following location
  `C:\Users\$user\AppData\Roaming\Zoom\bin\`
* Start the zoom application or do any activity like turning on/off camera inside zoom meeting.

 **Note**: You can modify the code of SHCore.dll by opening `shcore dll.sln` project in Visual studio.
 <br/>
  <br/>
 **Reference**: 
 <br/>
 https://blog.0patch.com/2020/07/remote-code-execution-vulnerability-in.html <br/>
 https://www.programmersought.com/article/85545053408/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →