header-logo
Suggest Exploit
vendor:
N/A
by:
Google Security Research
7,2
CVSS
HIGH
Wild Write
787
CWE
Product Name: N/A
Affected Version From: Win 7 32-bit
Affected Version To: Win 7 32-bit
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

Wild Write on Win 7 32-bit with Special Pool Enabled on win32k.sys

This proof of concept triggers a wild write on Win 7 32-bit with Special Pool enabled on win32k.sys.

Mitigation:

Enabling Special Pool on win32k.sys can help mitigate this vulnerability.
Source

Exploit-DB raw data:

Source: https://code.google.com/p/google-security-research/issues/detail?id=475

---
The attached PoC triggers a wild write on Win 7 32-bit with Special Pool enabled on win32k.sys.
---

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38276.zip