CVE-2016-0051
HIGH EXPLOITEDMicrosoft Windows - Local Privilege Escalation via WebDAV Client
Title source: llmExploitation Summary
CVE-2016-0051 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 9 public exploits from researchers including Metasploit, hex0r, koczkatamas, including a Metasploit module exploits/windows/local/ms16_016_webdav.
AI-analyzed exploit summary This Metasploit module exploits CVE-2016-0051, a local privilege escalation vulnerability in mrxdav.sys (WebDav) on Windows 7 SP1. It injects a reflective DLL into a process (e.g., notepad.exe) to elevate privileges to NT AUTHORITY\SYSTEM.
Description
The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "WebDAV Elevation of Privilege Vulnerability."
Exploits (9)
This Metasploit module exploits CVE-2016-0051, a local privilege escalation vulnerability in mrxdav.sys (WebDav) on Windows 7 SP1. It injects a reflective DLL into a process (e.g., notepad.exe) to elevate privileges to NT AUTHORITY\SYSTEM.
The provided ExploitDB entry lacks actual exploit code and instead directs users to external downloads (GitHub, GitLab) for the PoC. It references another exploit (39432) but does not include functional code or technical details.
This exploit leverages CVE-2016-0051 (MS16-016) to achieve local privilege escalation (LPE) on Windows 7 SP1 x86 by abusing a WebDAV server to trigger a kernel vulnerability. The PoC includes a fake WebDAV server and WinAPI calls to exploit the flaw.
This repository contains functional exploit code for CVE-2016-0051, demonstrating both a BSoD (Denial of Service) and an Elevation of Privilege (EoP) exploit. The code leverages a WebDAV server to trigger the vulnerability in Windows systems.
This repository contains a proof-of-concept exploit for CVE-2016-0051, demonstrating a local privilege escalation (LPE) vulnerability in Windows 7. The exploit includes compiled binaries and source code to achieve SYSTEM privileges via a BSoD and shell spawning mechanism.
The repository contains only a minimal README with no technical details or exploit code. It appears to be a placeholder or stub with no substantive content related to CVE-2016-0051.
This Metasploit module exploits CVE-2016-0051, a local privilege escalation vulnerability in mrxdav.sys on Windows 7 SP1. It spawns a process, reflectively injects a payload DLL, and elevates privileges to NT AUTHORITY\SYSTEM.
This repository contains functional proof-of-concept code for CVE-2016-0051, demonstrating both a Blue Screen of Death (BSoD) and an Elevation of Privilege (EoP) to SYSTEM on vulnerable Windows systems. The exploit leverages a WebDAV server to trigger the vulnerability, with specific implementations for Windows 7 SP1 x86 and Windows 10 x64.
References (5)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H