CVE-2013-5065CISA KEV: Actively Exploited

Microsoft Windows Kernel Privilege Escalation Vulnerability

Published Mar 3, 2022·Updated Mar 3, 2022

Description

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.

Public Exploits & PoCs1 found

PoC: RobbinHood

# NDPROXY Local SYSTEM privilege escalation # http://www.offensive-security.com # Tested on Windows XP SP3 # http://www.offensive-security.com/vulndev/ndproxy-local-system-exploit-cve-2013-5065/ # Original crash ... null pointer dereference # Access violation - code c0000005 (!!! second chance !!!) # 00000038 ?? ??? from ctypes import * from ctypes.wintypes import * import os, sys kernel32 = windll.kernel32 ntdll = windll.ntdll GENERIC_READ = 0x80000000 GENERIC_WRITE = 0x400000

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free