Description
Microsoft Windows Theme API中存在远程代码执行漏洞，该漏洞源于程序未能正确的解压文件。远程攻击者可借助特制的文件利用该漏洞在当前用户的上下文中执行任意代码。
Windows Theme API 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2018-8413
https://www.secrss.com/articles/58911
https://nic.seu.edu.cn/info/1047/1301.htm
https://www.venustech.com.cn/new_type/aqtg/20230915/26249.html
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8413
https://www.bleepingcomputer.com/news/security/windows-11-themebleed-rce-bug-gets-proof-of-concept-exploit/
https://github.com/advisories/GHSA-qmqc-m76c-pmrm
https://www.quorumcyber.com/threat-intelligence/windows-11-themebleed-remote-code-execution-vulnerability/
https://www.rapid7.com/db/vulnerabilities/msft-cve-2018-8413/
https://support.microsoft.com/zh-cn/topic/ms13-071-windows-theme-%E6%96%87%E4%BB%B6%E4%B8%AD%E7%9A%84%E6%BC%8F%E6%B4%9E%E5%8F%AF%E8%83%BD%E5%85%81%E8%AE%B8%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C-2013-%E5%B9%B4-9-%E6%9C%88-10-%E6%97%A5-1cffc4ed-7176-18ab-a59b-e6447fcda929