header-logo
Suggest Exploit
vendor:
Windows
by:
Google Security Research
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Windows
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

Pool Buffer Overflow in Windows Caption Bar

The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window layout and resolution. A bruteforce Python script is also attached which should trigger a crash fairly quickly.

Mitigation:

Install the latest security patches and updates for the affected software.
Source

Exploit-DB raw data:

Source: https://code.google.com/p/google-security-research/issues/detail?id=321

The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window.  The trigger depends on the current window layout and resolution. The PoC takes an offset on the command line to be able to test with different values, I tested this on two different Win7 32-bit VM's and had success with 0 and 475000 (Resolution was 1024x768 and 1280x1024). A bruteforce Python script is also attached which should trigger a crash fairly quickly.

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38268.zip

Navigation

Suggest Exploit

Services By CQR