MS11-077 .fon Kernel-Mode Buffer Overrun PoC

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : MS11-077 .fon Kernel-Mode Buffer Overrun PoC
# Published : 2011-10-13
# Author :
# Previous Title : Sterling Trader <= 7.0.2 Integer Overflow
# Next Title : Ashampoo Burning Studio Elements 10.0.9 (.ashprj) Heap Overflow

# Exploit Title: MS11-077 .fon buffer overrun kernel-mode drivers exploit
# Google Dork: [if relevant] ?(we will automatically add these to the GHDB)
# Date: 10/12/2011
# Author: Byoungyoung Lee, http://www.cc.gatech.edu/~blee303/
# Software Link:
# Version: Windows 7 32bit, fully patched until Sep. 2011
# Tested on: Windows 7 32bit
# CVE : CVE-2011-2003

Exploit is downloadable from:

http://www.exploit-db.com/sploits/my.fon.tar.gz

http://exploitshop.wordpress.com/2011/10/12/ms11-077-vulnerabilities-in-windows-kernel-mode-drivers-could-allow-remote-code-execution-2567053/

Byoungyoung