NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.
| Software | From | Fixed in |
|---|---|---|
| pedestal_software / integrity_protection_driver | 1.2 | 1.2.x |
| pedestal_software / integrity_protection_driver | 1.3 | 1.3.x |