CVE-2013-3881

This Metasploit module exploits a NULL pointer dereference in win32k.sys via TrackPopupMenuEx, leading to local privilege escalation on Windows 7 SP0/SP1. It injects a reflective DLL into a notepad process to trigger the vulnerability and execute arbitrary payloads.

This Metasploit module exploits a NULL pointer dereference vulnerability in win32k.sys via TrackPopupMenuEx, allowing local privilege escalation on Windows 7 SP0/SP1. It reflectively injects a DLL to trigger the exploit and execute a payload.