Sploitus

Exploit for Immunity Canvas: MS14_040

canvas Β· 2014-07-08

Exploit Code

MARKDOWN26 lines
## https://sploitus.com/exploit?id=MS14_040
**Name**|  ms14_040  
---|---  
**CVE**|  CVE-2014-1767  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| AFD.SYS dangling pointer vulnerability  
**Notes**| Repeatability: Infinite  
Notes:   
  
This vulnerability affects Microsoft Windows from XP to 8.1, although the exploit  
is not available for every version.  
  
This module automatically migrates to lsass.exe.  
  
Tested on:  
Windows 7 x86  
  
This vulnerability was found and documented by Sebastian Apelt from Siberas.  
Our exploitation technique for windows 8.1 is based on his work, although for  
other version vary.  
  
See http://TODO/Pwn2own_2014_AFD.sys_privilege_escalation.pdf  
  
VENDOR: Microsoft  
CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1767  
CVE Name: CVE-2014-1767