Microsoft Windows Kernel Ring-0 Address Leak
Posted by deepcore on December 21, 2017 – 3:01 am
It was discovered that it is possible to disclose addresses of kernel-mode Paged Pool allocations via a race-condition in the implementation of the NtQueryVirtualMemory system call (information class 2, MemoryMappedFilenameInformation). The vulnerability affects Windows 7 to 10, 32-bit and 64-bit.
Post a reply
You must be logged in to post a comment.