CVE-2021-31166

CVE-2021-31166: Vulnerabilidad de ejecución remota de código en la pila de protocolo HTTP Esta es una prueba de concepto para CVE-2021-31166 "Vulnerabilidad de ejecución remota de código en la pila de protocolo HTTP", una desreferencia de use-after-free en http.sys parcheada por Microsoft en mayo...

Exploit for Use After Free in Microsoft

CVE-2021-31166 is a remote code execution vulnerability in the HTTP protocol stack. It is a use-after-free dereference bug in the http!UlpParseContentCoding function. The bug occurs when the function appends items to a local list and then moves it into the Request structure without NULLing out th...

Exploit for Use After Free in Microsoft

CVE-2021-31166 is a proof of concept for a remote UAF Use-After-Free vulnerability in the HTTP.sys protocol stack. The bug occurs in the http!UlpParseContentCoding function, which appends items to a local LISTENTRY and then moves it into the Request structure without NULLing out the local list...