Remote Kernel Code Execution Via HTTP Request In IIS On Windows

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eis on Wednesday April 15, 2015 @09:18AM (#9380732)

You two seem to not understand still, please re-read my comment.

The point is this is allowing code execution within the kernel of windows. It doesn't even reach the IIS userland process.

[ Parent | on HN ]

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by bontoJR on Wednesday April 15, 2015 @09:37AM (#9380861)

I actually don't because I have no clue how Windows Server works. So this attack hits the kernel and the context is low level, right?

[ Parent | on HN ]

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eis on Wednesday April 15, 2015 @09:57AM (#9380970)

Not sure if I am not clear enough but yes, it 'hits the kernel and the context is low level'. As low as it can get on Windows.

[ Parent | on HN ]

[deleted]

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eis on Wednesday April 15, 2015 @11:34AM (#9381631)

I have trouble understanding what you want to say but I did not say what you quoted me with. Please don't put words in my mouth.

The title was giving people the wrong impression about the severity of the vulnerability. This has nothing to do with "avoid giving people ideas" which would be stupid anyways.

[ Parent | on HN ]

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by reidrac on Wednesday April 15, 2015 @09:44AM (#9380884)

My windows knowledge is rusty and outdated but... do you mean that code runs in ring 0? that "kernel space"?

[ Parent | on HN ]

Re:Remote Kernel Code Execution Via HTTP Request In IIS On W... by eis on Wednesday April 15, 2015 @09:56AM (#9380965)

Yes

[ Parent | on HN ]