Windows Task Scheduler Privilege Escalation 0day

vtol · Nov 22, 2010

http://www.exploit-db.com/exploits/15589/

# Exploit Title: Windows Task Scheduler Privilege Escalation 0day # Date: 20-11-2010 # Author: webDEViL # Tested on: Windows 7/2008 x86/x64
Click to expand...

said being based on stuxnet, attacker does not require admin privileges

trismegistos · Nov 22, 2010

http://www.vupen.com/english/advisories/2010/2761

A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to take complete control of a vulnerable system. This issue is caused by an access validation error in the Task Scheduler service that failes to prevent users from manipulating certain fields in schema XML files via the Component Object Model (COM) interface, which could allow malicious users to manipulate a valid XML file and bypass the CRC32 integrity checks to execute arbitrary code with SYSTEM privileges.

This vulnerability is one of the unpatched issues being exploited by the Stuxnet malware.

The vulnerability has been confirmed by VUPEN with fully updated Microsoft Windows 7, Microsoft Windows 2008 Server SP2, and Microsoft Windows Vista SP2 systems.
Click to expand...

Log in or Sign up

Windows Task Scheduler Privilege Escalation 0day

vtol Registered Member

trismegistos Registered Member

Log in or Sign up

Windows Task Scheduler Privilege Escalation 0day

vtol Registered Member

trismegistos Registered Member

Useful Searches