CVE-2014-1767

This is a proof-of-concept exploit for CVE-2014-1767, targeting a Windows kernel vulnerability in the AFD driver. It leverages heap manipulation and memory corruption to achieve local privilege escalation by overwriting the HalDispatchTable.

This repository contains a functional exploit for CVE-2014-1767, a Windows kernel vulnerability (Double Free) affecting Windows 7 x86 SP1. The exploit leverages the NtCreateWorkerFactory and NtSetInformationWorkerFactory APIs to achieve local privilege escalation (LPE) by manipulating kernel structures and replacing the current process token with the SYSTEM token.

This exploit targets CVE-2014-1767, a local privilege escalation vulnerability in AFD.SYS on Windows 7 x64. It leverages a dangling pointer to overwrite kernel memory and escalate privileges by manipulating the HalDispatchTable.

This exploit leverages a dangling pointer vulnerability in AFD.SYS (CVE-2014-1767) to achieve local privilege escalation on Windows 7 32-bit systems. It manipulates kernel memory structures to overwrite the HalDispatchTable and execute a token-stealing payload.