vendor:
Windows 7
by:
Google Security Research
9,3
CVSS
HIGH
Buffer Overflow
120
CWE
Product Name: Windows 7
Affected Version From: Win7 32-bit
Affected Version To: Win7 32-bit
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020
trigger.cpp should fire the issue
trigger.cpp is a proof of concept code which can be used to exploit a buffer overflow vulnerability in Win7 32-bit. The PoC must be compiled in release mode and may need to be run a few times to trigger the crash.
Mitigation:
Ensure that the code is compiled in release mode and that the buffer size is checked before writing to it.