OSVDB ID: 66981 Title: Microsoft Windows win32k.sys Driver User Mode Copy Memory Allocation Local Privilege Escalation |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Windows contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when win32k.sys fails to properly allocate memory when copying data from user mode, allowing a local authenticated attacker to cause a pool overflow and gain full user privileges. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Patch / RCS Exploit: Exploit Private Disclosure: Vendor Verified OSVDB: Authentication Required |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. Check the vendor advisory or solution in the references section. |
Products |
|
References |
Credit |
Unknown or Incomplete |