DavidXanatos
patreon
Sandboxie-Plus v0.5.4
🕑 Added 2021-01-08 17:35:42 +0000 UTCUrgent security fixes (thanks @diversenok)
Build 5.46.0 resolves many box isolation issues some of them critical that could allow rogue applications to escape the sandbox. It is highly advised to upgrade quickly to the new builds. For further details please review the change log below.
If you have issues with an update installation, just uninstall the previous version keeping the sandboxie.ini and reinstall the new build.
Download: https://github.com/sandboxie-plus/Sandboxie/releases
Hotfix Changelog
Added
- added "RunServiceAsSystem=..." allows specific named services to be ran as system
Changed
- refactored some code around SCM access
Fixed
- fixed a crash issue in SbieSvc.exe introduced with the last build
- fixed issue with sandman ui update check
Removed
- removed "ProtectRpcSs=y" due to incompatybility with new isolation defaults
Release Changelog
Added
- Sandboxie now strips particularly problematic privileges from sandboxed system tokens
-- with those a process could atempt to bypass the sandbox isolation (thanks Diversenok)
-- old legacy behavior can be enabled with "StripSystemPrivileges=n" (absolutely NOT Recommended) - added new isolation options "ClosePrintSpooler=y" and "OpenSmartCard=n"
-- those resources are open by default but for a hardened box its desired to close them - added print spooler filter to prevent printers from being set up outside the sandbox
-- the filter can be disabled with "OpenPrintSpooler=y" - added overwrite prompt when recovering an already existing file
- added "StartProgram=", "StartService=" and "AutoExec=" options to the SandMan UI
- added more compatybility templates (thanks isaak654)
Changed
- Changed Emulated SCM behavior, boxed services are no longer by default started as boxed system
-- use "RunServicesAsSystem=y" to enable the old legacy behavior
-- Note: sandboxed services with a system token are still sandboxed and restricted
-- However not granting them a system token in the first place removes possible exploit vectors
-- Note: this option is not compatible with "ProtectRpcSs=y" and takes precedence! - Reworked dynamic IPC port handling
- Improved Resource Monitor status strings
Fixed
- fixed a critical issue that allowed to create processes outside the sandbox (thanks Diversenok)
- fixed issues with dynamic IPC port handling that allowed to bypass IPC isolation
- fixed issue with ipc tracing
- fixed CVE-2019-13502 "\RPC Control\LSARPC_ENDPOINT" is now filtered by the driver (thanks Diversenok)
-- this allowed some system options to be changed, to disable filtering use "OpenLsaEndpoint=y" - fixed hooking issues SBIE2303 with chrome, edge and possibly others
- fixed failed check for running processes when performing snapshot operations
- fixed some box option checkboxes were not properly initialized
- fixed unavailable options are not properly disabled when sandman is not connected to the driver
- fixed MSI instalelr issue, not being able to create "C:\Config.Msi" folder on windows 20H2
- added missing localization to generic list commands
- fixed issue with "iconcache_*" when runngin sandboxed explorer
- fixed more issues with groups
Comments
David Xanatos
some false positives are always to be expected, those tools are not relble
David Xanatos
that template has been removed you need to reove it from your ini config
Sandboxie-Plus-x64-v0.5.4d.exe Virus Total; Microsoft Program:Win32/Wacapew.C!ml
Any ideas?
I have tried sandboxie was running great before i upgraded from Version 0.5.3a to v5.43- v5.46.1 all give the same error. if i do not click the error message the D2 game will run in the sandbox, i just have to leave the error message on the desktop..
I have 2 windows 10 pro computers with the same error,, only when i try to a D2 game in a sandbox,, The exception unknown software exception (0xc00000d) occurred in the application at location 0x0000000000684CC8 click on OK to terminate program SBIE1411 Sandbox D2Bot specifies unknown template Windows10CoreUI SBIE1411 Sandbox D2WazzUP specifies unknown template Windows10CoreUI SBIE1411 Sandbox D2BilaDAD specifies unknown template Windows10CoreUI SBIE1411 Sandbox D2Zug specifies unknown template Windows10CoreUI SBIE1411 Sandbox D2NoKiss specifies unknown template Windows10CoreUI SBIE1411 Sandbox TemplateSettings specifies unknown template Windows10CoreUI
A lot of work, tnx for keeping it!
