Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-16711. PoCs published by DownWithUp.
AI-analyzed exploit summary This PoC exploits a vulnerability in IObit's WinRing0 driver to overwrite the MSR_LSTAR register, leading to a BSoD. It demonstrates a local privilege escalation by abusing the driver's IOCTL interface to write arbitrary values to model-specific registers.
Description
IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for input.
Exploits (1)
This PoC exploits a vulnerability in IObit's WinRing0 driver to overwrite the MSR_LSTAR register, leading to a BSoD. It demonstrates a local privilege escalation by abusing the driver's IOCTL interface to write arbitrary values to model-specific registers.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H