Local Privilege Escalation in Microsoft Windows XP SP3 via MQAC.sys and BthPan.sys Drivers
CVE-2014-4971
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 26 July 2014
Badges
What is CVE-2014-4971?
Microsoft Windows XP SP3 contains a security flaw that fails to validate addresses in specific IRP handler routines. This oversight allows local users to exploit crafted addresses in IOCTL calls, leading to arbitrary data writes in memory. The vulnerabilities are linked to the MQAC.sys driver within the Message Queuing Access Control subsystem and the BthPan.sys driver associated with Bluetooth Personal Area Networking. Attackers could leverage this weakness to escalate their privileges on the system, thus potentially compromising data integrity and security.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.