Your browser doesn't support embedded videos, but don't worry, you can download it and watch it with your favorite video player! Announcement The post hereafter will explain in detail every step that took place during the exploitation phase and how we came to this solution. So before we dive into the details, now that the vulnerabilities have been fixed, below you can see a full run of the exploit (now fixed) in action. #Pwn2Own /qpw7yIEQLS- Zero Day Initiative April 7, 2021 They're off to the disclosure room for details. Wow - with just 10 seconds left of their 2nd attempt, Daan Keuper and Thijs Alkemade were able to demonstrate their code execution via Zoom messenger. So during this project we had a lot to learn about the Windows internals. While we had profound experience with exploiting memory corruption vulnerabilities on many platforms, both of us had zero experience with this on Windows.
We hope that detailing our process helps others with similar research in the future. In this blog post, we wanted to not only explain the bugs and our exploit, but provide a log of our entire process. Now that related bugs have been fixed for all users (see ZDI-21-971 and ZSB-22003) we can safely detail the bugs we exploited and how we found them. You will need to disable driver signature checks to install these drivers, which varies between different versions of Windows.On April 7 2021, Thijs Alkemade and Daan Keuper demonstrated a zero-click remote code execution exploit in the Zoom video client during Pwn2Own 2021. The drivers will install and both the webcam and built in mic should work perfectly. Right click on unidentified device and select "Update device driver" > "Browse my computer for driver software" > Select the folder with the driver you unzipped. Plug the camera in and go to device manager, this can be found by right clicking on "computer" in the start menu, going to properties and clicking device manager on the left. You can check out his blog here and send thanks his way, i have mirrored the drivers here in case anything ever happens to his website.ĭownload Logitech QuickCam Zoom Windows 7, 8 or 10 Driver Unfortunately Logitech never bothered to release any drivers to support the webcam in Windows Vista or Windows 7, let alone any 64bit drivers.īecause of this the webcam has sat in my cupboard for the last 4 years not been used, i randomly found it again today and did a quick Google, to my surprise someone had released some hacked drivers for it that work in both 32bit and 64bit Windows 7 This was a pretty expensive webcam back in 2005 when it was given to the MSN Messenger beta participants, which is how i ended up with it.
0 kommentar(er)
