Local Privilege Escalation in Microsoft Windows XP SP3 via MQAC.sys and BthPan.sys Drivers

CVE-2014-4971

What is CVE-2014-4971?

Microsoft Windows XP SP3 contains a security flaw that fails to validate addresses in specific IRP handler routines. This oversight allows local users to exploit crafted addresses in IOCTL calls, leading to arbitrary data writes in memory. The vulnerabilities are linked to the MQAC.sys driver within the Message Queuing Access Control subsystem and the BthPan.sys driver associated with Bluetooth Personal Area Networking. Attackers could leverage this weakness to escalate their privileges on the system, thus potentially compromising data integrity and security.

References