exploit-db-mirror/platforms/windows/dos/39025.txt
Offensive Security 4ac8afedb7 DB: 2015-12-18
26 new exploits
2015-12-18 05:02:23 +00:00

9 lines
408 B
Text
Executable file

Source: https://code.google.com/p/google-security-research/issues/detail?id=544
The attached PoC triggers a null pointer vulnerability in OffsetChildren on Windows 7 32-bit. By mapping the null page an attacker can leverage this vulnerability to write to an arbitrary address.
---
Proof of Concept:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39025.zip