CVE-2010-1894
Windows XP SP2-SP3 and Windows Server 2003 SP2 - Privilege Escalation via Win32k Exception Handling
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1894. PoCs published by MJ0011.
AI-analyzed exploit summary This exploit targets a local privilege escalation vulnerability in Microsoft Windows by sending a crafted message to the DDEMLEvent window, potentially causing a denial-of-service condition. It leverages the Win32k.sys SfnLOGONNOTIFY vulnerability to execute arbitrary code with kernel-level privileges.
Description
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privileges via a crafted application, aka "Win32k Exception Handling Vulnerability."
Exploits (2)
This exploit targets a local privilege escalation vulnerability in Microsoft Windows by sending a crafted message to the DDEMLEvent window, potentially causing a denial-of-service condition. It leverages the Win32k.sys SfnLOGONNOTIFY vulnerability to execute arbitrary code with kernel-level privileges.
This exploit demonstrates a local kernel Denial of Service (DoS) vulnerability in Windows 2000/XP/2003 by sending a crafted message (0x4c) with invalid parameters to the DDEMLEvent window, triggering a BSOD due to improper handling in the SfnLOGONNOTIFY function within win32k.sys.