PT-2014-1018

Name of the Vulnerable Software and Affected Versions win32k.sys versions in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1...

MS14-015: Vulnerabilities in Windows kernel mode driver could allow elevation of privilege: March 11, 2014

None None...

MS14-015: Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2930275)

The remote Windows host has the following vulnerabilities : - A privilege escalation vulnerability exists in the Windows kernel-mode driver due to improper handling of objects in memory. If successfully exploited, a locally authenticated attacker could run a specially crafted application in kerne...

Assessing risk for the January 2014 security updates

Today we released four security bulletins addressing six CVE’s. All four bulletins have a maximum severity rating of Important. We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment. Bulletin Most likely attack vector Max Bulletin...

MS14-003: Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2913602)

The remote host contains a flaw in the way the Windows kernel handles thread-owned window handle objects. Successful exploitation could allow a local attacker to take complete control of an affected system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71943;...

PT-2014-1016

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Server 2008 R2 SP1 Description The issue is related to the improper use of thread-owned objects during the processing of window handles in the Windows kernel-mode driver, allowing local users to gain privileges via a crafted...

Windows Manage Driver Loader

This module loads a KMD Kernel Mode Driver using the Windows Service API. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SERVICEDEMANDSTART', 'boot' = 'SERVICEBOOTSTART', 'auto' =...

CVE-2013-3907: Improper Restriction of Operations within the Bounds of a Memory Buffer

portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Port-Class Driver Double Fetch Vulnerability."...

PT-2013-4727

Name of the Vulnerable Software and Affected Versions Windows XP versions SP2 through SP3 Windows Server 2003 version SP2 Description The issue is related to the Win32k.sys kernel-mode driver, which does not properly validate addresses in memory. This allows a local user to potentially gain...

PT-2013-5355

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsoft...

PT-2013-4717 · Microsoft · Windows Server 2003 +7

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP SP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows Server 2012 Description: An information disclosu...

CVE-2013-3128

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5, allow remote attackers to execute arbitra...

CVE-2013-3881

The win32k.sys kernel-mode driver in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 contains a logic flaw known as the "Win32k NULL Page Vulnerability." Specifically, under certain conditions, the TrackPopupMenuEx function passes a NULL pointer to the MNEndMenuState procedure, allowing lo...

PT-2013-4713

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 R2 SP1 Description The issue allows local users to gain privileges via a crafted application. An elevation of privilege vulnerability exists when the Windows kernel-mode driver improperly handles objects in...

PT-2013-4711 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 and R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsoft Window...

CVE-2013-1341

CVE-2013-1341 affects the Windows kernel component win32k.sys (kernel-mode drivers) and allows local privilege escalation via a crafted application on several Windows families. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8. Root cause: ...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (2876315)

This host is missing an important security update according to Microsoft Bulletin MS13-076. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel 'Win32k.sys'本地权限提升漏洞(CVE-2013-3167)

BUGTRAQ ID: 60949 CVECAN ID: CVE-2013-3167 Microsoft Windows是微软公司推出的一系列操作系统。 Windows 内核模式驱动程序不正确地处理内存对象的方式中存在一个信息泄露漏洞，可能导致特权提升。 0 Microsoft Windows Windows XP Service Pack 3 Microsoft Windows Windows Vista x64 Edition Serv Microsoft Windows Windows Vista Service Pack 2 Microsoft Windows Windows...

PT-2013-3095 · Microsoft · Windows Xp +8

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8 Microsof...

CVE-2013-3138: Undefined Security Weakness

Integer overflow in the TCP/IP kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service system hang via crafted TCP packets, aka "TCP/IP Integer Overflo...