Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
BID:11218
Info
Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
| Bugtraq ID: | 11218 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 18 2004 12:00AM |
| Updated: | Sep 18 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Ratter. |
| Vulnerable: |
Microsoft Windows CE 4.2 Microsoft Windows CE 3.0 Microsoft Windows CE 2.0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
An information disclosure vulnerability is reported to affect the Windows CE kernel.
It is reported that the kernel memory structure KDataStruct is available to userland applications. This can be ultimately employed on any Windows CE system to gain addresses of the export sections of several kernel libraries.
This vulnerability is exploited by the virus WinCE.Duts.A (MCID 3238) in order to provide portability and reliability.
An information disclosure vulnerability is reported to affect the Windows CE kernel.
It is reported that the kernel memory structure KDataStruct is available to userland applications. This can be ultimately employed on any Windows CE system to gain addresses of the export sections of several kernel libraries.
This vulnerability is exploited by the virus WinCE.Duts.A (MCID 3238) in order to provide portability and reliability.
Exploit / POC
Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Microsoft Windows CE KDatastruct Information Disclosure Vulnerability
References:
References: