{"id":293,"date":"2010-08-07T02:28:31","date_gmt":"2010-08-07T02:28:31","guid":{"rendered":"http:\/\/www.houquner.com\/?p=1120"},"modified":"2010-08-07T02:28:31","modified_gmt":"2010-08-07T02:28:31","slug":"microsoft-windows-kernel-win32k-sys-pool-corruption-vulnerability","status":"publish","type":"post","link":"https:\/\/www.houquner.com\/index.php\/archives\/293","title":{"rendered":"Microsoft Windows Kernel \u201cWin32k.sys\u201d Pool Corruption Vulnerability"},"content":{"rendered":"<p><a href=\"http:\/\/www.vupen.com\/english\/advisories\/2010\/2029\">http:\/\/www.vupen.com\/english\/advisories\/2010\/2029<\/a><\/p>\n<p>Technical Description<\/p>\n<p>A vulnerability has been identified in Microsoft Windows, which could be exploited by local attackers to cause a denial of service or potentially gain elevated privileges. This issue is caused by a buffer overflow error in the &#8220;CreateDIBPalette()&#8221; function within the kernel-mode device driver &#8220;Win32k.sys&#8221; when using the &#8220;biClrUsed&#8221; member value of a &#8220;BITMAPINFOHEADER&#8221; structure as a counter while retrieving Bitmap data from the clipboard, which could be exploited by malicious users to crash an affected system or potentially execute arbitrary code with kernel privileges.<br \/>\nVUPEN has confirmed the vulnerability on fully patched Microsoft Windows 7, Windows Server 2008 SP2, Windows Server 2003 SP2, Windows Vista SP2, and Microsoft Windows XP SP3.<\/p>\n<p>\u8f6c\u8f7d\u8bf7\u6ce8\u660e\uff1a<a href=\"https:\/\/www.houquner.com\">Kermit\u7684\u7f51\u7ad9<\/a> &raquo; <a href=\"https:\/\/www.houquner.com\/index.php\/archives\/293\">Microsoft Windows Kernel \u201cWin32k.sys\u201d Pool Corruption Vulnerability<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>http:\/\/www.vupen.com\/english\/advisories\/2010\/2029 Technical Description A vulnerability has been identified in Microsoft Wind [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-293","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/posts\/293"}],"collection":[{"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/comments?post=293"}],"version-history":[{"count":0,"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/posts\/293\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/media?parent=293"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/categories?post=293"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.houquner.com\/index.php\/wp-json\/wp\/v2\/tags?post=293"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}