关联漏洞
标题：
Microsoft Streaming Service 安全漏洞
(CVE-2023-36802)
描述：Microsoft Streaming Service是美国微软（Microsoft）公司的一个视频平台。 Microsoft Streaming Service存在安全漏洞。攻击者利用该漏洞可以提升权限。以下产品和版本受到影响：Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Win
描述
PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy
介绍
# CVE-2023-36802 MSKSSRV.sys Local Privilege Escalation
PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy which suffers from a type confusion vulnerability.
This proof-of-concept is modeled after the write-up done by Benoît Sevens (@benoitsevens). The article can be found here: https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-36802.html
Original exploit and writeup done by Valentina Palmiotti (@chompie1337)
https://securityintelligence.com/x-force/critically-close-to-zero-day-exploiting-microsoft-kernel-streaming-service/
NOTE: This was only tested on Windows 11 22H2 22621.1848. PreviousMode attacks may be mitigated in insider builds.
文件快照
[4.0K] /data/pocs/76ff88162b9dcd494058e41522635924cbf41573
├── [ 810] README.md
├── [ 17K] Source.c
└── [3.7K] Types.h
0 directories, 3 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。