News for hackers. Stuff that matters.

A comment on Microsoft finds privilege escalation vulnerability in Huawei driver. Parent comment

Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Thursday April 04, 2019 @12:08PM (#19573965)
> via the exploited code

Their scanner doesn't show any exploitation happening, and they don't say that it does.

[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by novaleaf on Friday April 05, 2019 @09:58AM (#19582517)
I admit that I am reading into the line "abnormal memory allocation and execution" and thinking it's intentional.

You are right that they don't seem to know what code was being executed. Just that some code (be it real code or random garbage) was injected and executed.

[ Parent | on HN ]
Re:Microsoft finds privilege escalation vulnerability in Hua... by monocasa on Sunday April 07, 2019 @12:38PM (#19597941)
It's intentional; it's not "exploitation". It's really doing privilege deescalation of the shellcode.

They know the code it's running for the most part, it's the CreatProcessW stuff they talk about.

[ Parent | on HN ]