CVE-2010-1897
Windows Kernel win32k.sys - Privilege Escalation via Pseudo-Handle Validation Bypass
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1897. PoCs published by Core Security.
AI-analyzed exploit summary This exploit leverages a vulnerability in the Windows kernel's 'xxxCreateWindowEx' function, where improper validation of the 'hParent' parameter during callback execution allows for privilege escalation. The PoC modifies the parameter to trigger a crash and potentially execute privileged code.
Description
The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not properly validate pseudo-handle values in callback parameters during window creation, which allows local users to gain privileges via a crafted application, aka "Win32k Window Creation Vulnerability."
Exploits (1)
This exploit leverages a vulnerability in the Windows kernel's 'xxxCreateWindowEx' function, where improper validation of the 'hParent' parameter during callback execution allows for privilege escalation. The PoC modifies the parameter to trigger a crash and potentially execute privileged code.