File tree Expand file tree Collapse file tree 1 file changed +5
-4
lines changed
modules/exploits/windows/local Expand file tree Collapse file tree 1 file changed +5
-4
lines changed Original file line number Diff line number Diff line change @@ -20,10 +20,11 @@ def initialize(info={})
20
20
super ( update_info ( info , {
21
21
'Name' => 'VirtualBox Guest Additions VBoxGuest.sys Privilege Escalation' ,
22
22
'Description' => %q{
23
- A vulnerability within VBoxGuest module allows an attacker to inject memory they control
24
- into an arbitrary location they define. This can be used by an attacker to overwrite
25
- HalDispatchTable+0x4 and execute arbitrary code by subsequently calling
26
- NtQueryIntervalProfile. This has been tested on VBoxGuest Additions up to 4.3.10r93012.
23
+ A vulnerability within the VBoxGuest driver allows an attacker to inject memory they
24
+ control into an arbitrary location they define. This can be used by an attacker to
25
+ overwrite HalDispatchTable+0x4 and execute arbitrary code by subsequently calling
26
+ NtQueryIntervalProfile on Windows XP SP3 systems. This has been tested with VBoxGuest
27
+ Additions up to 4.3.10r93012.
27
28
} ,
28
29
'License' => MSF_LICENSE ,
29
30
'Author' =>
You can’t perform that action at this time.
0 commit comments