The 2010 Pwnie Winner For Best Privilege Escalation Bug

Windows NT #GP Trap Handler (CVE-2010-0232 )

Credit: Tavis Ormandy

One of the most complicated vulnerabilities of 2010, this privilege escalation bug required more than a few tricks to exploit. Its discovery shows a rare understanding of some of the more obscure aspects of the Intel architecture. The bug was present in all versions of Windows from NT 3.1 all the way up to Windows 7.

(CVE-2010-0232 )