CVE-2011-0045

Related Files

Microsoft Windows XP WmiTraceMessageVa Integer Truncation

Posted Mar 1, 2011

Authored by Nikita Tarakanov

Proof of concept exploit that demonstrates the Microsoft Windows XP WmiTraceMessageVa integer truncation vulnerability as described in MS11-011.

tags | exploit, proof of concept

systems | windows

advisories | CVE-2011-0045

SHA-256 | e31bad28776892e292acb8989472895fc26f1565c00e163191c7322984a43a3b

Download | Favorite | View

Zero Day Initiative Advisory 11-064

Posted Feb 8, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-064 - This vulnerability allows local attackers to execute arbitrary code from the context of kernelspace on vulnerable installations of Microsoft Windows. The ability to make a system call is required in order to exploit this vulnerability. The specific flaw exists within the kernel's support for Trace Events. Due to a bad type conversion, the kernel will use a truncated length for allocating data from userspace. When populating this buffer the kernel will use a differing length causing a buffer overflow. This will cause memory corruption and can lead to code execution under the context of the kernel.

tags | advisory, overflow, arbitrary, kernel, local, code execution

systems | windows

advisories | CVE-2011-0045

SHA-256 | fb34574bb8d5c5f4bc812c8231d09f55b00c7481accb6d8d909623a5d3709219

Download | Favorite | View