###  CVE-2019-1215

#### Describe

NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

#### ImpactVersion

| Product             | CPU Architecture | Version | Update | Tested |
| ------------------- | ---------------- | ------- | ------ | ------ |
| Windows Server 2003 |                  |         | SP2    |        |
| Windows Xp          |                  |         | SP2    |        |
| Windows Xp          |                  |         | SP3    |        |

#### Patch

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215
```

#### Utilization

The vulnerability does not test, the root directory is stored in the network collection **[CVE number] .zip** EXP or POC, code status unknown

#### ProjectSource

- None

#### Analyse

- https://bbs.pediy.com/thread-182135.htm



