Microsoft Windows contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when win32k.sys's NtGdiEnableEUDC API does not properly validate some user-inputs, causing a stack overflow. This will allow a local attacker to gain kernel mode privileges and execute arbitrary code.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Discovered in the Wild
OSVDB:
Authentication Required
Solution
OSVDB is not aware of a solution for this vulnerability.
