Lucene search

K
canvasImmunity CanvasMS12_042
HistoryJun 12, 2012 - 6:55 p.m.

Immunity Canvas: MS12_042

2012-06-1218:55:01
Immunity Canvas
exploitlist.immunityinc.com
33

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

21.9%

Name ms12_042
CVE CVE-2012-0217 Exploit Pack
Notes:

This vulnerability only affects Intel x64-based versions of Windows 7 and Windows Server 2008 R2.

The exploit will also facilitate the loading of unsigned kernel drivers
without triggering any alerts on 64bit Windows.

http://repret.wordpress.com/2012/08/25/windows-kernel-intel-x64-sysret-vulnerability-code-signing-bypass-bonus/

Tested on:
Windows Server 2008 R2 x64
Windows 7 Professional SP1 x64

VENDOR: Microsoft
CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0217
CVE Name: CVE-2012-0217

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

21.9%