New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.
Issue 433
Starred by 2 users
Status: Fixed
Owner:
hawkes@google.com
Closed: Sep 2015
Cc:
█ nils.som...@gmail.com
project-...@google.com



Sign in to add a comment
 Windows kernel: use-after-free with printer device contexts
Reported by cevans@google.com, Jun 5 2015 Back to list 
Credit is to "Nils Sommer of bytegeist, working with Google Project Zero".

---
The attached PoC demonstrates a UAF condition with printer device contexts. The PoC will trigger on Win 7 32-bit with Special Pool enabled.
---

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without a broadly available patch, then the bug report will automatically
become visible to the public.
crash_specialpool_433.txt
7.0 KB View Download
bug433.cpp
1.6 KB Download
Comment 1 by cevans@google.com, Jun 5 2015
Labels: Id-30375
Comment 2 by cevans@google.com, Jul 30 2015
Labels: Deadline-Exceeded Deadline-Grace
6 day grace period extension. Patch targeted for 09/08 (September Patch Tuesday).
Project Member Comment 3 by hawkes@google.com, Aug 21 2015
Owner: hawkes@google.com
Project Member Comment 4 by hawkes@google.com, Sep 10 2015
Labels: CVE-2015-2507
Status: Fixed
Project Member Comment 5 by hawkes@google.com, Sep 21 2015
Labels: -Restrict-View-Commit
Fixed in September bulletin MS15-097.
► Sign in to add a comment