CVE-2018-1000006
HIGHElectron < 1.7.11 - Remote Code Execution via Protocol Handler
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2018-1000006.
PoCs published by Metasploit, Wflki, CHYbeta, including Metasploit module exploits/windows/browser/exodus.
AI-analyzed exploit summary This Metasploit module exploits CVE-2018-1000006, a vulnerability in the ElectronJS framework used by Exodus Wallet, to achieve remote code execution via a crafted URL that triggers a malicious protocol handler.
Description
GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitrary command execution if the user clicks on a specially crafted URL. This has been fixed in versions 1.8.2-beta.4, 1.7.11, and 1.6.16.
Exploits (4)
This Metasploit module exploits CVE-2018-1000006, a vulnerability in the ElectronJS framework used by Exodus Wallet, to achieve remote code execution via a crafted URL that triggers a malicious protocol handler.
This exploit leverages a URI handler vulnerability in Exodus wallet to execute arbitrary commands via the '--gpu-launcher' parameter. The PoC demonstrates command injection by redirecting to a malicious 'exodus://' URI.
This repository demonstrates CVE-2018-1000006, a remote command execution vulnerability in Electron versions prior to 1.8.2-beta.4. The PoC includes vulnerable and fixed Electron applications, highlighting the exploit via protocol handler misuse.
This Metasploit module exploits a vulnerability in the ElectronJS framework's protocol handler, allowing remote code execution in Exodus Wallet when a user clicks a crafted URL. It serves a malicious HTML page that triggers a PowerShell payload via the 'exodus://' protocol handler.
References (6)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H