Sploitus

Exploit for Immunity Canvas: MS_NTVDM

CVE-2010-0232

canvas · 2010-01-21

Exploit Code

MARKDOWN20 lines
## https://sploitus.com/exploit?id=MS_NTVDM
**Name**|  ms_ntvdm  
---|---  
**CVE**|  CVE-2010-0232  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| NtVdmControl()-&gt;KiTrap0d local  
**Notes**| CVE Name: CVE-2010-0232  
VENDOR: Microsoft  
Notes:   
This exploit gets you LOCAL/SYSTEM on vulnerable versions of Windows (which is essentially all of them).   
It needs a writable directory to upload its payload (%TEMP% works usually) and  
it will automatically chdir into %TEMP% if it can't upload a file to the current  
working directory.  
  
This exploit will set up a listener on the remote Node's 127.0.0.1.  
  
  
Repeatability: One Shot  
MSRC: MS10-015  
Date public: 01/19/2010