Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Attacking the Windows NVIDIA Driver

projectzero.google | blog | #sandbox-escape | #windows | #kernel | #gpu | #nvidia | #project-zero | #graphics-driver

Summary

A Project Zero post on attacking NVIDIA's Windows kernel graphics driver, covering several of the 16 vulnerabilities found during this GPU attack surface research.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
research · projectzero.google
Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332
A Google Project Zero post exploiting a bug in NVIDIA's NVMAP driver (CVE-2014-5332) to escape the Chrome for Android sandbox.
vulnerability · projectzero.google
Internet Explorer EPM Sandbox Escape CVE-2014-6350
A Google Project Zero post detailing exploitation of CVE-2014-6350 to escape Internet Explorer's Enhanced Protected Mode sandbox.
blog · projectzero.google
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.
blog · projectzero.google
task_t considered harmful
A Project Zero deep dive into a design flaw around task_t in the XNU kernel, demonstrating sandbox escapes and privilege escalation and how each mitigation was defeated.
blog · projectzero.google
A Shadow of our Former Self
An exploration of Windows symbolic link mitigations, presenting a technique introduced in Windows 8 that restores part of the symbolic link capability available to sandboxed processes.
back