Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9641. PoCs published by Parvez Anwar.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in Trend Micro's tmeext.sys driver (CVE-2014-9641) by leveraging arbitrary write to overwrite the HalDispatchTable and execute token-stealing shellcode. It is designed for Windows XP SP3 and spawns a command shell with elevated privileges.
Description
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call.
Exploits (1)
This exploit targets a privilege escalation vulnerability in Trend Micro's tmeext.sys driver (CVE-2014-9641) by leveraging arbitrary write to overwrite the HalDispatchTable and execute token-stealing shellcode. It is designed for Windows XP SP3 and spawns a command shell with elevated privileges.