System mechanic pro 18 2018 update#
System mechanic pro 18 2018 download#

Source: User32 TokenFlags: 0x2a00 ( Token in use ) Primary Group: S-1-5-21-2231847605-3015871416-1385684711-513Ġ9 0x000000009 SeTakeOwnershipPrivilege Attributes - Enabledġ0 0x00000000a SeLoadDriverPrivilege Attributes - Enabledġ1 0x00000000b SeSystemProfilePrivilege Attributes - Enabledġ2 0x00000000c SeSystemtimePrivilege Attributes - Enabledġ3 0x00000000d SeProfileSingleProcessPrivilege Attributes - Enabledġ4 0x00000000e SeIncreaseBasePriorityPrivilege Attributes - Enabledġ5 0x00000000f SeCreatePagefilePrivilege Attributes - Enabledġ6 0x000000010 SeCreatePermanentPrivilege Attributes - Enabledġ7 0x000000011 SeBackupPrivilege Attributes - Enabledġ8 0x000000012 SeRestorePrivilege Attributes - Enabledġ9 0x000000013 SeShutdownPrivilege Attributes - EnabledĢ0 0x000000014 SeDebugPrivilege Attributes - EnabledĢ1 0x000000015 SeAuditPrivilege Attributes - EnabledĢ2 0x000000016 SeSystemEnvironmentPrivilege Attributes - EnabledĢ3 0x000000017 SeChangeNotifyPrivilege Attributes - Enabled DefaultĢ4 0x000000018 SeRemoteShutdownPrivilege Attributes - EnabledĢ5 0x000000019 SeUndockPrivilege Attributes - EnabledĢ6 0x00000001a SeSyncAgentPrivilege Attributes - EnabledĢ7 0x00000001b SeEnableDelegationPrivilege Attributes - EnabledĢ8 0x00000001c SeManageVolumePrivilege Attributes - EnabledĢ9 0x00000001d SeImpersonatePrivilege Attributes - Enabledģ0 0x00000001e SeCreateGlobalPrivilege Attributes - Enabledģ1 0x00000001f SeTrustedCredManAccessPrivilege Attributes - Enabledģ2 0x000000020 SeRelabelPrivilege Attributes - Enabledģ3 0x000000021 SeIncreaseWorkingSetPrivilege Attributes - Enabledģ4 0x000000022 SeTimeZonePrivilege Attributes - Enabledģ5 0x000000023 SeCreateSymbolicLinkPrivilege Attributes - Enabledģ6 0x000000024 Unknown Privilege Attributes - Enabledģ7 0x000000025 Unknown Privilege Attributes - Enabledģ8 0x000000026 Unknown Privilege Attributes - Enabledģ9 0x000000027 Unknown Privilege Attributes - Enabled Looking at the number of privileges obtained we have a few to choose from for our exploit. You can play with the offsets to get different number of privileges but with the offsets I chose I ended up looking like this below kd> dt nt!_SEP_TOKEN_PRIVILEGES fffff8a002cc4a30+40 To exploit I’m overwriting the _SEP_TOKEN_PRIVILEGES structure with the fixed value of 0xFFFFFFFE. To get to our arbitrary write a number of conditions had to be satisfied in a number of subroutines, the main disassembly screen shots shown below.

System mechanic pro 18 2018 update#

There is however an update downloader link on the site for “System Mechanic Pro” bringing it to version 17.5.0.116 where the vulnerable driver has been removed. Another one of their products “System Mechanic Pro” on version 15.5.0.61 is also affected from this vulnerability as it gets shipped with the same version of the driver as is bundled with “System Shield AntiVirus and AntiSpyware”. The product version of “System Shield AntiVirus and AntiSpyware” tested on is 5.0.0.136 and the vulnerable version of the driver “amp.sys” is 5.4.11.1.ĭue to no response from the vendor for the last few weeks I’m going public with this one. This is an arbitrary memory overwrite vulnerability due to the inputted buffer not being validated and has been assigned a CVE ID of CVE-2018-5701.

System mechanic pro 18 2018 download#

When prompted, save the file and then double-click on it to launch the Download Manager, which will guide you through the installation and activation of the product.A kernel vulnerability exists in an antivirus product called “System Shield AntiVirus and AntiSpyware” by Iolo Technologies. Individual download links are also provided below.Ĭlick on a product name to begin the download. Please visit the iolo technologies main product download page at to download the latest version of your iolo product. Modified on: Fri, 23 Jul, 2021 at 5:23 PM Solution home General Getting Started Download Your iolo Product