← Advisories

Antamedia Internet Cafe Software 7.1 Insecure Permissions/DLL Loading

High
Advisory ID
ZSL-2011-5005
Release Date
03 April 2011
Vendor
Affected Version
7.1.1.0
CVE
N/A
Tested On
Microsoft Windows XP Professional SP3 (EN)
Summary

Internet Cafe Software – Cyber Cafe software is a worldwide top selling solution for CyberCafe management and game center control. It protects your computers from unauthorized usage and helps with customer billing. Many features like POS, print manager, console controller, smart cards, credit card billing, makes it suitable for any cyber cafe, hotel, airport terminals, game center.

Description

Antamedia ICS suffers from a dll hijacking vulnerability and improper ACL permissions that enables the attacker to execute arbitrary code or change the binary with another of his/her choice because of the (C)Change perm for the group Everyone (AICLogin.exe, AICCore.exe). The vulnerable extensions are .fp3 and .swf thru qwave.dll library.

Proof of Concept
Disclosure Timeline
N/A
Credits
Vulnerability discovered by Gjoko Krstic
References
Changelog
03.04.2011Initial release
04.04.2011Added reference [1] and [2]