Windows 7 - win32k Bitmap Use-After-Free MS16-062 1

2016-06-15T00:00:00
ID EDB-ID:39959
Type exploitdb
Reporter Nils Sommer
Modified 2016-06-15T00:00:00

Description

Windows 7 - win32k Bitmap Use-After-Free (MS16-062) (1). CVE-2016-0171. Dos exploit for windows platform

                                        
                                            Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=746

The attached PoC triggers a blue screen on Windows 7 with special pool enabled on win32k.sys . A reference to the bitmap object still exists in the device context after it has been deleted.


Proof of Concept:
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/39959.zip