Microsoft Windows Kernel – ‘win32k!OffsetChildren’ Null Pointer Dereference

  • 作者: Nils Sommer
    日期: 2015-12-17
  • 类别:
    平台:
  • 来源:https://www.exploit-db.com/exploits/39025/
  • Source: https://code.google.com/p/google-security-research/issues/detail?id=544
    
    The attached PoC triggers a null pointer vulnerability in OffsetChildren on Windows 7 32-bit. By mapping the null page an attacker can leverage this vulnerability to write to an arbitrary address.
    ---
    
    
    Proof of Concept:
    https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39025.zip