Exploitation Summary
CVE-2013-1300 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Meatballs1, Nils, Jon, including a Metasploit module exploits/windows/local/ms13_053_schlamperei.
AI-analyzed exploit summary This is a Metasploit module for CVE-2013-1300, a kernel pool overflow in Win32k allowing local privilege escalation. It injects a reflective DLL into a process to exploit the vulnerability and migrate into winlogon.exe for SYSTEM privileges.
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle objects in memory, which allows local users to gain privileges via a crafted application, aka "Win32k Memory Allocation Vulnerability."
Exploits (3)
This is a Metasploit module for CVE-2013-1300, a kernel pool overflow in Win32k allowing local privilege escalation. It injects a reflective DLL into a process to exploit the vulnerability and migrate into winlogon.exe for SYSTEM privileges.
This repository contains a non-working exploit stub for CVE-2013-1300, a Windows kernel vulnerability. The code attempts to exploit a handle table corruption issue but is incomplete and lacks critical functionality.
This Metasploit module exploits a kernel pool overflow in Win32k (CVE-2013-1300) to achieve local privilege escalation by nulling the ACL of winlogon.exe, allowing migration to a SYSTEM process. It uses reflective DLL injection and was originally used in Pwn2Own 2013.