Microsoft Windows Kernel NDProxy本地权限提升漏洞(MS10-099)

BUGTRAQ ID: 45269 CVE ID: CVE-2010-3963 Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows的NDProxy驱动在实现上存在漏洞，攻击者可利用此漏洞以内核级别权限执行任意代码，完全控制受影响的计算机。 此漏洞源于由于未正确验证从用户模式传递到内核的输入，导致路由和远程访问NDProxy驱动程序溢出。 Microsoft Windows XP Microsoft Windows Server 2003 AVAYA Meeting Exchange 厂商补丁： Microsoft ---------...

MS10-099: Vulnerability in Routing and Remote Access Could Allow Elevation of Privilege (2440591)

The Routing and Remote Access NDProxy component of the remote Windows host does not properly validate user-supplied input when passing data from user mode to the kernel. An attacker who can log on locally to the affected system can exploit this to run arbitrary code in kernel mode. C Tenable...