Diving into Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer Driver
AI Engineer - Learn how to integrate AI into software applications
Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
This Black Hat conference talk explores the Windows printer rendering architecture and identifies critical security vulnerabilities. Learn how researchers ZeSen Ye and Zhiniang Peng discovered Local Privilege Escalation (LPE) and Remote Code Execution (RCE) vulnerabilities in Windows printer drivers. Gain valuable insights into analyzing complex parsing components within the Windows Spooler system, along with practical tips for identifying similar security flaws. The 36-minute presentation provides a comprehensive examination of printer driver attack surfaces that security professionals and researchers can leverage to improve system defenses.
Syllabus
Diving into Spooler: Discovering LPE and RCE Vulnerabilities in Windows Printer Driver
Taught by
Black Hat