CVE-2015-2507
Microsoft Windows - Local Privilege Escalation via Adobe Type Manager Library
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-2507. PoCs published by Nils Sommer, OpenSISE.
AI-analyzed exploit summary This exploit demonstrates a Use-After-Free (UAF) vulnerability in Windows 7 32-bit systems involving printer device contexts. The PoC triggers the UAF condition when Special Pool is enabled, potentially leading to privilege escalation or remote code execution.
Description
The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Font Driver Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2512.
Exploits (2)
This exploit demonstrates a Use-After-Free (UAF) vulnerability in Windows 7 32-bit systems involving printer device contexts. The PoC triggers the UAF condition when Special Pool is enabled, potentially leading to privilege escalation or remote code execution.
This repository contains a functional proof-of-concept exploit for CVE-2015-2507, a Windows kernel vulnerability in win32k.sys. The exploit triggers a DRIVER_PAGE_FAULT_IN_FREED_SPECIAL_POOL (0xD5) bugcheck by manipulating GDI objects and document properties, leading to a Blue Screen of Death (BSoD).