Null pointer dereference

CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object FDO to prevent user-moade access to the Physical Device Object PDO, which allows local users to gain SYSTEM privileges via a...

[Reversemode Paper] Exploiting WDM Audio Drivers

Hi, For those researchers who are interested in the driver security and also for driver writers, the paper "Exploiting WDM Audio Drivers" has been released. This paper explains an attack vector inherent to certain WDM audio drivers running on Windows Vista, XP, 2000 and 2003. Successful...