CVE-2015-1305
McAfee Data Loss Prevention Endpoint - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-1305. PoCs published by Parvez Anwar.
AI-analyzed exploit summary This exploit demonstrates a privilege escalation vulnerability in McAfee Data Loss Prevention Endpoint by leveraging an arbitrary write flaw in the hdlpctrl.sys driver. It includes shellcode to steal the SYSTEM token and elevate privileges on Windows XP SP3 and Windows Server 2003 SP2.
Description
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted (1) 0x00224014 or (2) 0x0022c018 IOCTL call.
Exploits (1)
This exploit demonstrates a privilege escalation vulnerability in McAfee Data Loss Prevention Endpoint by leveraging an arbitrary write flaw in the hdlpctrl.sys driver. It includes shellcode to steal the SYSTEM token and elevate privileges on Windows XP SP3 and Windows Server 2003 SP2.