Posts Tagged ‘kernel’

Microsoft Windows Kernel bind() Out-Of-Bounds Read

Two related bugs have been discovered in the Microsoft Windows kernel code responsible for implementing the bind() socket function, specifically in the afd!AfdBind and tcpip!TcpBindEndpoint routines. They both can lead to reading beyond the allocated pool-based buffer memory area, potentially allowing user-mode applications to disclose kernel-mode secrets. They can also be exploited to trigger a […]

Microsoft Windows Kernel NtGdiGetDIBitsInternal Memory Disclosure / DoS

Multiple bugs have been discovered in the implementation of the win32k!NtGdiGetDIBitsInternal system call, which is a part of the graphic subsystem in all modern versions of Windows. The issues can potentially lead to kernel pool memory disclosure or denial of service. Under certain circumstances, memory corruption could also be possible. Source: Microsoft Windows Kernel NtGdiGetDIBitsInternal […]