News
Vigil@nce - Windows 2003: privilege escalation via TCP/IP IOCTL
November 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
A local attacker can use a malicious TCP/IP IOCTL, to corrupt the
memory of Windows 2003, in order to escalate his privileges.
Impacted products: Windows 2003
Severity: 2/4
Creation date: 12/11/2014
DESCRIPTION OF THE VULNERABILITY
The TCP/IP stack of Windows 2003 is implemented in the tcpip.sys
and tcpip6.sys drivers.
However, when these drivers receive a special IOCTL, the kernel
memory is corrupted.
A local attacker can therefore use a malicious TCP/IP IOCTL, to
corrupt the memory of Windows 2003, in order to escalate his
privileges.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Windows-2003-privilege-escalation-via-TCP-IP-IOCTL-15616
