CVE-2015-2291 PoC — Intel Ethernet diagnostics driver for Windows 缓冲区错误漏洞

Source

https://github.com/paysonism/CVE-2015-2291-Spoofer-Analysis

Associated Vulnerability

Title: Intel Ethernet diagnostics driver for Windows 缓冲区错误漏洞 (CVE-2015-2291)
Description:(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.

Description

Overview of a application that I reversed using the CVE-2015-2291 exploit from the Intel Ethernet Diagnostics Driver (iQVW32.sys) for memory manipulation used in hwid spoofing.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →