Symantec Encryption Desktop 10 - Local Buffer Overflow / Local Privilege Escalation

source: https://www.securityfocus.com/bid/57835/info Symantec Encryption Desktop is prone to a local buffer-overflow vulnerability. A local attacker may exploit this issue to execute arbitrary code with escalated privileges. define IOCONTROLVULN 0x80022058 define TARGETDEVICE L"\Device\pgpwdef"...

MS11-080 AfdJoinLeaf Privilege Escalation

This module exploits a flaw in the AfdJoinLeaf function of the afd.sys driver to overwrite data in kernel space. An address within the HalDispatchTable is overwritten and when triggered with a call to NtQueryIntervalProfile will execute shellcode. This module will elevate itself to SYSTEM, then...