Lucene search

K
canvasImmunity CanvasMS_NTVDM
HistoryJan 21, 2010 - 7:30 p.m.

Immunity Canvas: MS_NTVDM

2010-01-2119:30:00
Immunity Canvas
exploitlist.immunityinc.com
24

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

15.6%

Name ms_ntvdm
CVE CVE-2010-0232 Exploit Pack
VENDOR: Microsoft
Notes:
This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows (which is essentially all of them).
It needs a writable directory to upload its payload (%TEMP% works usually) and
it will automatically chdir into %TEMP% if it can’t upload a file to the current
working directory.

This exploit will set up a listener on the remote Node’s 127.0.0.1.

Repeatability: One Shot
MSRC: MS10-015
Date public: 01/19/2010

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0005 Low

EPSS

Percentile

15.6%