Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-6008

Description

A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call.

POC

Reference

- https://www.exploit-db.com/exploits/43057/

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/CrackerCat/Kernel-Security-Development

- https://github.com/ExpLife0011/awesome-windows-kernel-security-development

- https://github.com/NetW0rK1le3r/awesome-hacking-lists

- https://github.com/Ondrik8/exploit

- https://github.com/cbayet/Exploit-CVE-2017-6008

- https://github.com/cbwang505/poolfengshui

- https://github.com/lnick2023/nicenice

- https://github.com/ommadawn46/HEVD-BufferOverflowNonPagedPoolNx-Win10-22H2

- https://github.com/pravinsrc/NOTES-windows-kernel-links

- https://github.com/qazbnm456/awesome-cve-poc

- https://github.com/readloud/Awesome-Stars

- https://github.com/taielab/awesome-hacking-lists

- https://github.com/xbl2022/awesome-hacking-lists

- https://github.com/xbl3/awesome-cve-poc_qazbnm456