Creative Ensoniq PCI ES1371 WDM Driver Local Privilege Escalation Vulnerability

Bugtraq ID:	27179
Class:	Design Error
CVE:	CVE-2008-7211
Remote:	No
Local:	Yes
Published:	Jan 07 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Ruben Santamarta discovered this issue.
Vulnerable:	Creative Labs Ensoniq PCI ES1371 WDM Driver 5.1.3612 .0 + Microsoft Windows Vista Ultimate + Microsoft Windows Vista Home Premium + Microsoft Windows Vista Home Basic + Microsoft Windows Vista Enterprise + Microsoft Windows Vista Business + Microsoft Windows Vista 0 + Microsoft Windows Vista Business 64-bit edition 0 + Microsoft Windows Vista Enterprise 64-bit edition 0 + Microsoft Windows Vista Home Basic 64-bit edition 0 + Microsoft Windows Vista Home Premium 64-bit edition 0 + Microsoft Windows Vista Ultimate 64-bit edition 0 + Microsoft Windows Vista x64 Edition 0
Not Vulnerable:

Creative Ensoniq PCI ES1371 WDM Driver Local Privilege Escalation Vulnerability

Creative Ensoniq PCI ES1371 WDM drivers are prone to a local privilege-escalation vulnerability.

Successful exploits allow local users to execute arbitrary machine code with kernel-level privileges, facilitating the complete compromise of affected computers.

This issue occurs when the vulnerable driver is running in a Microsoft Windows Vista environment. This occurs in VMware Server and Workstation environments when running Microsoft Vista guest operating systems with sound enabled.

This issue affects 'es1371mp.sys' 5.1.3612.0. Given the nature of the issue, other device drivers and versions may also be vulnerable, but this has not been confirmed.

Creative Ensoniq PCI ES1371 WDM Driver Local Privilege Escalation Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/ksdispatch_plugin.zip

Creative Ensoniq PCI ES1371 WDM Driver Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Creative Ensoniq PCI ES1371 WDM Driver Local Privilege Escalation Vulnerability

References:

• Creative Homepage (Creative Technologies)
  
• Exploiting WDM Audio Drivers (Ruben Santamarta)
  
• VMware Homepage (VMware)
  
• Windows Vista Homepage (Microsoft)