Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

🗓️ 17 Oct 2024 08:38:47Reported by Dor00tkitType

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft. CVE-2024-30090 - Local Privilege Escalation Proof of Concept. Exploit uses NtQuerySystemInformation to get ntoskrnl base and Compile as x64 in Parent.cpp, while the exploit is compiled as x86 in Child.cpp

Reporter	Title	Published	Views	Family All 53
Information Security Automation	New episode “In The Trend of VM” (#9): 4 trending vulnerabilities of October, scandal at The Linux Foundation, social “attack on the complainer”, “Ford’s method” for motivating IT specialists to fix vulnerabilities	28 Nov 202412:57	–	avleonov
Information Security Automation	The severity of the Elevation of Privilege – Microsoft Streaming Service (CVE-2024-30090) vulnerability has increased	22 Oct 202411:44	–	avleonov
Information Security Automation	The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased	22 Oct 202420:07	–	avleonov
BDU FSTEC	The vulnerability of the Windows operating system’s streaming data transmission service allows attackers to enhance their privileges.	24 Jun 202400:00	–	bdu_fstec
Circl	CVE-2024-30090	17 Oct 202409:56	–	circl
CNNVD	Microsoft Streaming Service Security Vulnerability	11 Jun 202400:00	–	cnnvd
CVE	CVE-2024-30090	11 Jun 202416:59	–	cve
Cvelist	CVE-2024-30090 Microsoft Streaming Service Elevation of Privilege Vulnerability	11 Jun 202416:59	–	cvelist
Microsoft KB	June 11, 2024—KB5039211 (OS Builds 19044.4529 and 19045.4529) - EXPIRED	13 Aug 202407:00	–	mskb
Microsoft KB	June 11, 2024—KB5039212 (OS Builds 22621.3737 and 22631.3737)	13 Aug 202407:00	–	mskb