CVE-2013-0008
Windows Vista/7/8, Server 2008/2012, RT - Privilege Escalation via Win32k Window Broadcast
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2013-0008.
PoCs published by Metasploit, 0vercl0k, Tavis Ormandy, Axel Souchet, Ben Campbell, including Metasploit module exploits/windows/local/ms13_005_hwnd_broadcast.
AI-analyzed exploit summary This Metasploit module exploits CVE-2013-0008, a Windows kernel vulnerability that allows low-integrity processes to broadcast messages to higher-integrity command prompts, enabling privilege escalation. It uses techniques like spawning a medium-integrity command prompt via Win+Shift+# and broadcasting commands to execute payloads.
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle window broadcast messages, which allows local users to gain privileges via a crafted application, aka "Win32k Improper Message Handling Vulnerability."
Exploits (3)
This Metasploit module exploits CVE-2013-0008, a Windows kernel vulnerability that allows low-integrity processes to broadcast messages to higher-integrity command prompts, enabling privilege escalation. It uses techniques like spawning a medium-integrity command prompt via Win+Shift+# and broadcasting commands to execute payloads.
This exploit leverages CVE-2013-0008 to drive a Medium Integrity Level (IL) cmd.exe from a Low IL process via message broadcasting. It uses SendMessage with HWND_BROADCAST to inject commands into a privileged cmd.exe spawned by explorer.exe.
This Metasploit module exploits CVE-2013-0008 (MS13-005) to escalate privileges from low to medium integrity on Windows systems by broadcasting commands via HWND_BROADCAST. It supports multiple techniques (WEB, FILE, TYPE) for payload delivery.