Podcasts Technology Day[0] [binary] Exploiting VMware Workstation and the Return of CSG0-Days

[binary] Exploiting VMware Workstation and the Return of CSG0-Days

Published: May 25, 2023, midnight

This week we've got a handful of low-level vulns, VM-escape, Windows EoP, and a single IPv6 packet leading to a kernel panic/denial of service, and one higher-level issue with a bug chain in CS:GO.

\n


\n

This is our final episode until September 25th as we will be heading off on our regular summer break.

\n


\n

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/214.html

\n


\n

[00:00:00] Introduction

\n

[00:01:12] Spot the Vuln - Reference Check

\n

[00:06:56] Exploiting VMware Workstation at Pwn2Own Vancouver [CVE-2023-20869/20870]

\n

[00:17:44] CS:GO: From Zero to 0-day

\n

[00:30:27] CVE-2022-41073: Windows Activation Contexts EoP

\n

[00:38:37] Linux IPv6 Route of Death 0day

\n

[00:46:36] Google Chrome V8 ArrayShift Race Condition Remote Code Execution

\n

[00:47:46] Specter Will Give Hardwear.IO PS5 Talk

\n

[00:49:11] Resources while we are on bread

\n


\n

The DAY[0] Podcast episodes are streamed live on Twitch twice a week:

\n

-- Mondays at 3:00pm Eastern (Boston) we focus on web and more bug bounty style vulnerabilities

\n

-- Tuesdays at 7:00pm Eastern (Boston) we focus on lower-level vulnerabilities and exploits.

\n


\n

We are also available on the usual podcast platforms:

\n

-- Apple Podcasts: https://podcasts.apple.com/us/podcast/id1484046063

\n

-- Spotify: https://open.spotify.com/show/4NKCxk8aPEuEFuHsEQ9Tdt

\n

-- Google Podcasts: https://www.google.com/podcasts?feed=aHR0cHM6Ly9hbmNob3IuZm0vcy9hMTIxYTI0L3BvZGNhc3QvcnNz

\n

-- Other audio platforms can be found at https://anchor.fm/dayzerosec

\n


\n

You can also join our discord: https://discord.gg/daTxTK9