21 January 2008, 07:35
In his article, "Exploiting WDM Audio Drivers," Rubén Santamarta describes potential vulnerabilities in WDM drivers that allow local users to escalate their privileges on systems. He explains how possible driver initialisation problems can cause a NULL-pointer dereference, allowing attackers to execute arbitrary code in the kernel.
Santamarta decribes the problem with a driver developed for Windows 2000 and XP that is also used with Vista, which is how the problem came to light. After reading this article, WDM driver developers should be equipped to determine whether similar vulnerabilities are present in their own drivers.
- Exploiting WDM Audio Drivers, by Rubén Santamarta
Print Version
| Permalink: http://h-online.com/-746147
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
