ps-ppl-bypass

Process Explorer 취약한 드라이버 PPL 우회 SysInternals Process Explorer 드라이버PSEXP152.sys의 구버전17.x 이전이 취약하여 PPL 프로세스에 대한 전체 액세스 프로세스 핸들을 열 수 있다는 것IOCTL: 0x8335003c은 잘 알려져 있지만, 신버전17.x 이상도 여전히 취약하며 다른 드라이버 함수IOCTL: 0x83350014를 통해 동일한 작업을 수행할 수 있습니다. 이 IOCTL 함수는 임의의 핸들을 복제하며, 드라이버 버전 17.00에서 시스템 프로세스와 모든 보호된...

CVE-2005-2679

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process...

Sysinternals Process Explorer DLL Hijack

/ Exploit Title: Sysinternals Process Explorer DLL Hijacking on x86 Windows systems wow64cpu.dll Date: 27 Aug 2010 Author: miom Software Link: http://technet.microsoft.com/sysinternals/bb896653.aspx Version: Process Explorer v12.04 Tested on: Windows XP SP3 x86 This exploit targets x86 Windows...

CVE-2005-2679

CVE-2005-2679 describes a local buffer overflow in Sysinternals Process Explorer 9.23 and earlier than 9.25. The vulnerability arises from a long CompanyName field in the VersionInfo of a running process, allowing local users to execute arbitrary code. Affected product: Sysinternals Process Explo...

[SA16525] Process Explorer "CompanyName" Buffer Overflow

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...