CVE-2013-0109

## # This module requires Metasploit: http//metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' require 'rex' require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/process' require 'msf/core/post/windows/reflective_dll_injection' require 'msf/co ...

The named pipe, \pipe\nsvr, has a NULL DACL allowing any authenticated user to interact with the service It contains a stacked based buffer overflow as a result of a memmove operation Note the slight spelling differences: the executable is 'nvvsvcexe', the service name is 'nvsvc', and the named pipe is 'nsvr' This exploit automatically targets ...