SHARE
CORE IMPACT v7.5 - Exploits Update (Thu Jul 24 2008)
Windows I2O Utility Filter Driver Privilege Escalation Exploit
Exploits/Local [Windows]
• Thu Jul 24 2008
This module exploits a vulnerability in Windows I2O Utility Filter Driver when the 0x222F80 IOCTL in i2omgmt.sys is invoked with a specially crafted parameter. The IOCTL 0x222F80 handler in the i2omgmt.sys device driver in Windows I2O Utility Filter Driver allows local users to overwrite memory and execute arbitrary code via malformed Interrupt Request Packet (IRP) parameters.
Exploits Vulnerabiltiy: CVE-2008-322