CVE-2014-4076

CVE Database · CVE-2014-4076

CVE-2014-4076

· N/AModified

CVSS v3.1

N/A

EPSS

22.67%

Published

Nov 11, 2014

Modified

May 6, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMicrosoft Windows Server 2003 SP2 - Local Privilege Escalation (MS14-070)Exploit-DBMicrosoft Windows Server 2003 SP2 - TCP/IP IOCTL Privilege Escalation (MS14-070)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka "TCP/IP Elevation of Privilege Vulnerability."

Weaknesses (CWE)

CWE-264

Affected Products (3)

microsoft · windows_server_2003vulnerable

References (10)

http://www.exploit-db.com/exploits/35936

Exploit

http://www.osvdb.org/114532

http://www.securityfocus.com/bid/70976

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-070

https://www.exploit-db.com/exploits/37755/