Covered by 2 outlets — first reported by BleepingComputer, Nov 12, 16:04 UTC
New Windows SignDrop zero-day gives hackers SYSTEM privileges
MentionsMicrosoftMicrosoft Windows
In brief
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privileged process opens a prepared log, using path redirection to take control of
From The Hacker News's coverage.
Continue reading
2 outlets, in the order they reported it.
BleepingComputerFirst report
New Windows SignDrop zero-day gives hackers SYSTEM privileges
Security researcher Abdelhamid Naceri (also known as Nightmare Eclipse) has released a new Windows zero-day exploit that can let attackers gain SYSTEM privileges.
The Hacker News
New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver.
Explained
The technology and terms in this story. Learn more
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.