Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Stack Buffer Overflow when bypassing individual UAC prompts #3350

Closed
4 tasks done
A1ynn5 opened this issue Feb 23, 2025 · 0 comments
Closed
4 tasks done

[BUG] Stack Buffer Overflow when bypassing individual UAC prompts #3350

A1ynn5 opened this issue Feb 23, 2025 · 0 comments
Assignees
Labels
bug Something isn't working

Comments

@A1ynn5
Copy link

A1ynn5 commented Feb 23, 2025

Please confirm these before moving forward

  • I have searched for my issue and have not found a work-in-progress/duplicate/resolved issue.
  • I have tested that this issue has not been fixed in the latest (beta or stable) release.
  • I have checked the FAQ section for solutions.
  • This issue is about a bug (if it is not, please use the correct template).

UniGetUI Version

3.1.6

Windows version, edition, and architecture

Windows 11 Pro 23H2 22634.4391, x64

Describe your issue

When "Ask for administrator privileges once for each batch of operations" within "Admin Privilege Preferences" is set to ON, a stack overflow warning is issues each time a new queue item is started.

Steps to reproduce the issue

  1. Settings > Admin Privilege Preferences > Ask for administrator privileges once for each batch of operations > set to ON
  2. Start a process (an update n my case). Accept UAC prompt. Wait.
  3. A popup; The System detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application. NOTE: This occurs AFTER installation begins, not while downloading is taking place.

UniGetUI Log

[2/22/2025 10:42:28 PM] Resetting administrator rights cache for process id 13224
[2/22/2025 10:47:58 PM] Package is installed on a system-wide scope, forcing administrator rights...
[2/22/2025 10:47:58 PM] Loaded operation parameters for package id=FxSound.FxSound on manager Winget and operation Update: update --id "FxSound.FxSound" --exact --source winget --accept-source-agreements --disable-interactivity --silent --include-unknown --accept-package-agreements --force
[2/22/2025 10:47:58 PM] Caching admin rights for process id 13224

Package Managers Logs

Manager WinGet with version:
System WinGet CLI Version: v1.9.25200
Using Native WinGet helper (COM Api)

——————————————————————————————————————————


Logged native task on manager Winget. Task type is ListSources
Process start time: 2/22/2025 5:19:48 PM
Process end time:   2/22/2025 5:19:48 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is ListInstalledPackages
Process start time: 2/22/2025 5:20:05 PM
Process end time:   2/22/2025 5:20:46 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is OtherTask
Process start time: 2/22/2025 5:20:05 PM
Process end time:   2/22/2025 5:20:36 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged subprocess-based task on manager Winget. Task type is RefreshIndexes
Subprocess executable: "C:\Users\Andon\AppData\Local\Microsoft\WindowsApps\winget.exe"
Command-line arguments: " source update --disable-interactivity"
Process start time: 2/22/2025 5:20:06 PM
Process end time:   2/22/2025 5:20:10 PM

-- Process STDOUT
 ...

Return code: SUCCESS (0)

——————————————————————————————————————————

Logged native task on manager Winget. Task type is ListUpdates
Process start time: 2/22/2025 5:20:12 PM
Process end time:   2/22/2025 5:20:46 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is ListInstalledPackages
Process start time: 2/22/2025 5:59:02 PM
Process end time:   2/22/2025 5:59:38 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is OtherTask
Process start time: 2/22/2025 5:59:02 PM
Process end time:   2/22/2025 5:59:27 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is ListSources
Process start time: 2/22/2025 5:59:11 PM
Process end time:   2/22/2025 5:59:11 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is FindPackages
Process start time: 2/22/2025 6:13:27 PM
Process end time:   2/22/2025 6:13:35 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is FindPackages
Process start time: 2/22/2025 6:14:38 PM
Process end time:   2/22/2025 6:14:46 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged subprocess-based task on manager Winget. Task type is RefreshIndexes
Subprocess executable: "C:\Users\Andon\AppData\Local\Microsoft\WindowsApps\winget.exe"
Command-line arguments: " source update --disable-interactivity"
Process start time: 2/22/2025 6:22:02 PM
Process end time:   2/22/2025 6:22:05 PM

-- Process STDOUT
 ...

Return code: SUCCESS (0)

——————————————————————————————————————————

Logged native task on manager Winget. Task type is ListUpdates
Process start time: 2/22/2025 6:22:05 PM
Process end time:   2/22/2025 6:22:40 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is OtherTask
Process start time: 2/22/2025 6:22:07 PM
Process end time:   2/22/2025 6:22:30 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is LoadPackageDetails
Process start time: 2/22/2025 6:27:33 PM
Process end time:   2/22/2025 6:27:39 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Logged native task on manager Winget. Task type is LoadPackageVersions
Process start time: 2/22/2025 6:27:33 PM
Process end time:   2/22/2025 6:27:33 PM

-- Task information
 ...

The task reported success

——————————————————————————————————————————

Relevant information

No response

Screenshots and videos

Error.mp4
@A1ynn5 A1ynn5 added the bug Something isn't working label Feb 23, 2025
@marticliment marticliment reopened this Feb 23, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants