CVE-2015-0057
Windows win32k.sys - Local Privilege Escalation via Crafted Application
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2015-0057. PoCs published by Jean-Jamil Khalife, AmazingOut, highandhigh.
AI-analyzed exploit summary This is a writeup for CVE-2015-0057, a local privilege escalation vulnerability in Windows 8.1 (x64) affecting win32k.sys. The provided link points to a binary exploit, but no actual code is included in the text.
Description
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
Exploits (4)
This is a writeup for CVE-2015-0057, a local privilege escalation vulnerability in Windows 8.1 (x64) affecting win32k.sys. The provided link points to a binary exploit, but no actual code is included in the text.
This repository contains a functional exploit for CVE-2015-0057, a Windows kernel vulnerability involving HMValidateHandle and heap spraying. The code demonstrates a local privilege escalation (LPE) by manipulating window objects and hooking ClientLoadLibrary.
This is a detailed technical writeup explaining the exploitation of CVE-2015-0057, a use-after-free vulnerability in win32k.sys affecting Windows systems from XP to 8.1. It describes the vulnerability, exploitation techniques, and user-mode callback mechanisms.
This exploit leverages a Windows kernel vulnerability (CVE-2015-0057) to achieve local privilege escalation by manipulating the WM_SYSTIMER message handling mechanism. It replaces the primary token of the current process with that of the SYSTEM process, granting elevated privileges.