WiseCleaner Wise Force Deleter Arbitrary File Deletion Vulnerability

A vulnerability in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter versions through 7.3.2 allows local administrators to delete arbitrary files. This is achieved by sending a crafted request that exploits the vulnerable driver.

Impact

Exploitation of this vulnerability allows for arbitrary file deletion, which could lead to the unintentional removal of critical system or application files.

Reproduction

To reproduce this vulnerability, place the WiseDelfile64.sys file in the C:\Windows directory. After compiling the project, create a file named file.txt containing a list of files to be deleted, such as a Windows Defender executable. Run the compiled binary as an administrator, and the specified files will be deleted.