Description
Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable. Attackers can rename and overwrite MemuService.exe in the installation directory with a malicious executable, which executes with system-level privileges when the service restarts after a computer reboot.
Problem types
Missing Authentication for Critical Function
Product status
Credits
Alejandra Sánchez
References
www.exploit-db.com/exploits/46437 (ExploitDB-46437)
www.memuplay.com/ (Official Product Homepage)
www.memuplay.com/...le_name=Memu-Setup&from=official_release (Product Reference)
www.vulncheck.com/...scalation-via-insecure-file-permissions (VulnCheck Advisory: Memu Play 6.0.7 Privilege Escalation via Insecure File Permissions)