Vulners
Lucene search
Wondershare Dr.Fone 3.0.0 Unquoted Service Path
🗓️ 30 Oct 2020 00:00:00Reported by Andrea IntilangeloType 
packetstorm🔗 packetstormsecurity.com👁 726 Views
| Reporter | Title | Published | Views | Family All 8 |
|---|---|---|---|---|
 | Wondershare Dr.Fone 3.0.0 Unquoted Service Path Vulnerability | 31 Oct 202000:00 | – | zdt |
 | CVE-2020-27992 | 31 Oct 202016:14 | – | cve |
 | CVE-2020-27992 | 31 Oct 202016:14 | – | cvelist |
 | EUVD-2020-20484 | 7 Oct 202500:30 | – | euvd |
 | CVE-2020-27992 | 2 Nov 202021:15 | – | nvd |
 | CVE-2020-27992 | 2 Nov 202021:15 | – | osv |
 | Design/Logic Flaw | 2 Nov 202021:15 | – | prion |
 | CVE-2020-27992 | 22 May 202516:35 | – | redhatcve |
`# Exploit Title: Wondershare Dr.Fone DriverInstall.exe - "WsDrvInst" Unquoted Service Path
# Date: 2020-10-29
# Exploit Author: Andrea Intilangelo
# Vendor Homepage: https://www.wondershare.com
# Software Link: https://drfone.wondershare.com/
# Version: 3.0.0
# Tested on: Microsoft Windows 7sp2 x86/x64
# CVE : CVE-2020-27992
- C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto" |findstr /i /v "c:\windows\\" |findstr /i /v """
Wondershare Driver Install Service WsDrvInst C:\Program Files (x86)\Wondershare\dr.fone\Library\DriverInstaller\DriverInstall.exe Auto
- C:\>sc query WsDrvInst
NOME_SERVIZIO: WsDrvInst
TIPO : 10 WIN32_OWN_PROCESS
STATO : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, ACCEPTS_SHUTDOWN)
CODICE_USCITA_WIN32 : 0 (0x0)
CODICE_USCITA_SERVIZIO : 0 (0x0)
PUNTO_CONTROLLO : 0x0
INDICAZIONE_ATTESA : 0x0
- Get-Acl -Path "C:\Program Files (x86)\Wondershare\dr.fone\Library\DriverInstaller"
Directory: C:\Program Files (x86)\Wondershare\dr.fone\Library
Path Owner Access
---- ----- ------
DriverInstaller BUILTIN\Administrators BUILTIN\Users Allow FullControl...
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
30 Oct 2020 00:00Current
0.3Low risk
Vulners AI Score0.3
EPSS0.00039