what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Microsoft Windows Server 2003 SP2 Arbitrary Write Privilege Escalation

Posted Jan 29, 2015

Authored by Matthew Bergin

The tcpip.sys driver fails to sufficiently validate memory objects used during the processing of a user-provided IOCTL. By crafting an input buffer that will be passed to the Tcp device through the NtDeviceIoControlFile() function, it is possible to trigger a vulnerability that would allow an attacker to elevate privileges. Proof of concept exploit included.

tags | exploit, tcp, proof of concept

systems | windows

advisories | CVE-2014-4076

SHA-256 | 9d61f1a5823955c19741ad2d57e256f3641cf2f035e04e442eac8b77fd3054ea

Download | Favorite | View

Related Files

No related files