header-logo
Suggest Exploit
vendor:
Windows
by:
Google Security Research
7,8
CVSS
HIGH
Memory Access
416
CWE
Product Name: Windows
Affected Version From: Win 7
Affected Version To: Win 7
Patch Exists: No
Related CWE: None
CPE: Win 7
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2020

Win 7 with Special Pool on win32k

The attached testcase crashes Win 7 with Special Pool on win32k while accessing freed memory in bGetRealizedBrush.

Mitigation:

Ensure that memory is properly managed and freed when no longer needed.
Source

Exploit-DB raw data:

Source: https://code.google.com/p/google-security-research/issues/detail?id=458

---
The attached testcase crashes Win 7 with Special Pool on win32k while accessing freed memory in bGetRealizedBrush​​.
---

Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/38277.zip

Navigation

Suggest Exploit

Services By CQR