CVE-2013-4679
Symantec Workspace Virtualization <6.4.1953.0 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-4679. PoCs published by MJ0011.
AI-analyzed exploit summary This exploit targets a kernel-mode privilege escalation vulnerability in Symantec Workspace Virtualization 6.4.1895.0. It leverages a buffer overflow in the fslx.sys driver's hook function for NtQueryValueKey to execute arbitrary code in kernel mode, ultimately achieving local privilege escalation.
Description
Symantec Workspace Virtualization before 6.x before 6.4.1953.0, when a virtual application layer is configured, allows local users to gain privileges via an application that performs crafted interaction with the operating system.
Exploits (1)
This exploit targets a kernel-mode privilege escalation vulnerability in Symantec Workspace Virtualization 6.4.1895.0. It leverages a buffer overflow in the fslx.sys driver's hook function for NtQueryValueKey to execute arbitrary code in kernel mode, ultimately achieving local privilege escalation.