vendor:
Windows 7
by:
Google Security Research
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Windows 7
Affected Version From: Win 7 32-bit
Affected Version To: Win 7 32-bit
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020
Buffer Overflow in NtGdiBitBlt System Call
The attached PoC triggers a buffer overflow in the NtGdiBitBlt system call. It reproduces reliably on Win 7 32-bit with Special Pool enabled on win32k.sys.
Mitigation:
Enabling Special Pool on win32k.sys should prevent exploitation of this vulnerability.
