20070709 WinPcap NPF.SYS Local Privilege Escalation VulnerabilityThird-party advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=550 CVE-2007-3681
WinPcap 4.0 - 'NPF.SYS' Local Privilege Escalation
Record summary
CVE-2007-3681 has a selected CVSS score of 6.6; EIP currently links 1 catalogued exploit.
Description
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (Irp) parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWinPcap 4.0 - 'NPF.SYS' Local Privilege EscalationExploitDB exploitby Mario Ballano BárcenaNot analyzed1 file
References
Showing 12 of 1337889vdb entry
http://osvdb.org/37889 25982Third-party advisory
http://secunia.com/advisories/25982 1018350vdb entry
http://securitytracker.com/id?1018350 20070709 WinPcap NPF.SYS Privilege Elevation Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/473270/100/0/threaded 20070710 Re: WinPcap NPF.SYS Privilege Elevation Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/473297/100/0/threaded 20070710 Re: Re: WinPcap NPF.SYS Privilege Elevation Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/473301/100/0/threaded 24829vdb entry
http://www.securityfocus.com/bid/24829 ADV-2007-2468vdb entry
http://www.vupen.com/english/advisories/2007/2468 winpcap.orgConfirmation
http://www.winpcap.org/misc/changelog.htm winpcap-npf-code-execution(35309)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35309 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-3681