### CVE-2014-4076

#### Describe

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."


#### ImpactVersion

| Product             | CPU Architecture | Version | Update | Tested             |
| ------------------- | ---------------- | ------- | ------ | ------------------ |
| Windows Server 2003 |                  |         | SP2    | &#10004; |

#### Utilization

CompilerEnvironment

```
i586-mingw32msvc-gcc CVE-2014-4076.c -o CVE-2014-4076.exe
```

Test Machine Windows Server 2003 SP2 x86

![16](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2014-4076_win2003_x86.gif)


#### Analyze
- https://bbs.pediy.com/thread-198600.htm