header-logo
Suggest Exploit
vendor:
Windows 7
by:
Google Security Research
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Windows 7
Affected Version From: Win7 32-bit
Affected Version To: Win7 32-bit
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

trigger.cpp should fire the issue

trigger.cpp is a proof of concept code which can be used to exploit a buffer overflow vulnerability in Win7 32-bit. The PoC must be compiled in release mode and may need to be run a few times to trigger the crash.

Mitigation:

Ensure that the code is compiled in release mode and that the buffer size is checked before writing to it.
Source

Exploit-DB raw data:

Source: https://code.google.com/p/google-security-research/issues/detail?id=295

Platform: Win7 32-bit.
trigger.cpp should fire the issue, with caveats:
- PoC MUST be compiled in release mode.
- PoC may need to be run a few times to trigger the crash.

Analysis is attached as a text file.

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38273.zip