OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: WinPcap NPF.SYS Privilege Elevation Vulnerability

From: Gerald Combs (geraldwireshark.org)
Date: Tue Jul 10 2007 - 13:37:12 CDT

mballanogmail.com wrote:
> WinPcap NPF.SYS Privilege Elevation Vulnerability PoC exploit
> -------------------------------------------------------------
>
> Affected software:
>
> (*) WinPcap versions affected (Confirmed)
>
> - WinPcap 3.1
> - WinPcap 4.1
          ^^^^^^^^^^^

Can you clarify which 4.x version(s) you tested with? According to the
WinPcap web site, the latest stable release in the 4.x series is 4.0.1
(which is what we ship with the latest release of Wireshark, and which
addresses this vulnerability). 4.1 is still in beta.