header-logo
Suggest Exploit
vendor:
N/A
by:
Google Security Research
7,8
CVSS
HIGH
Null Pointer
476
CWE
Product Name: N/A
Affected Version From: 32-bit Windows
Affected Version To: 32-bit Windows
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

Null Pointer Issue on 32-bit Windows

This issue is a null pointer issue affecting 32-bit Windows versions. The offset is from adding onto another offset which isn't quite zero, so it is not 100% certain that it is just a null pointer. However, it was not possible to influence the values. A proof of concept is available which sets EIP to 0xdeadbeef.

Mitigation:

N/A
Source

Exploit-DB raw data:

Source: https://code.google.com/p/google-security-research/issues/detail?id=312

This issue is very likely a null pointer issue affecting 32-bit Windows version. The offset is from add onto another offset which isn't quite zero, so not 100% convinced it is just a null pointer, however I wasn't able to influence the values. because it was very straight forward to get EIP there is a PoC setting EIP to 0xdeadbeef
Debug output attached.

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38271.zip

Navigation

Suggest Exploit

Services By CQR