CVE-2015-2291 PoC — Intel Ethernet diagnostics driver for Windows 缓冲区错误漏洞

Source

https://github.com/Tare05/Intel-CVE-2015-2291

Associated Vulnerability

Title: Intel Ethernet diagnostics driver for Windows 缓冲区错误漏洞 (CVE-2015-2291)
Description:(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Description

PoC exploit for CVE-2015-2291

Readme

# Intel-CVE-2015-2291
PoC exploit for CVE-2015-2291

Data-only attack to pop a system shell with the vulnerable intel driver.

The code itselfs implements more "functionality" provided from the driver, like physical to virtual address translation, mapping physical memory (This two combined  = arbitrary kernel memory overwrite) so it can be used to execute arbitrary code in the kernel.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →