Microsoft Windows Kernel – Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)

Exploit Database
112 阅读

作者： Nils Sommer

日期： 2015-11-23
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/38796/

Source: https://code.google.com/p/google-security-research/issues/detail?id=505

The attached testcase triggers a use-after-free condition in win32k. The attached debugger output was triggered on Windows 7 with Special Pool enabled on win32k.sys.

---

Proof of Concept:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38796.zip

last Exploits
Microsoft Windows Kernel – Device Contexts and NtGdiSelectBitmap Use-After-Free (MS15-115)的更多信息

Apple QuickTime – ‘_Marshaled_pUnk’ Backdoor Client-Side Arbitrary Code Execution：
Wireshark 1.6.0/1.8.2 – Buffer Overflow (PoC)：
Microsoft Windows Kernel – ‘win32k.sys’ ‘.TTF’ Font Processing Out-of-Bounds Read with Malformed ‘glyf’ Table ‘win32k!fsc_CalcGrayRow’ (Denial of Service)：
Microsoft Windows 10 (1903/1909) – ‘SMBGhost’ SMB3.1.1 ‘SMB2_COMPRESSION_CAPABILITIES’ Buffer Overflow (PoC)：
Wireshark – memcpy ‘get_value / dissect_btatt’ SIGSEGV：
Core FTP Server 1.0.343 – Directory Traversal：
PHP 5.3.1 – LCG Entropy Security：
iMessage – Decoding NSSharedKeyDictionary Can Read Object Out of Bounds：