CVE-2020-1206

In the SMBGhost vulnerability CVE-2020-0796 I talked about a write-what-where primitive technique through the use of an integer overflow bug to change the pointer Alloc.Userbuffer to point to an address we desire and write arbitrary data into it. Similar to SMB Ghost, this vulnerability also exis...