Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com
☎ 03 60 47 09 81 - info@securiteinfo.com
Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.
- http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html
- http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html
- http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2014/Jul/96
- http://seclists.org/fulldisclosure/2014/Jul/97
- http://www.exploit-db.com/exploits/34112
- http://www.exploit-db.com/exploits/34131
- http://www.exploit-db.com/exploits/34982
- https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt
- https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt
No PoCs found on GitHub currently.