Windows内核访问控制列表本地拒绝服务漏洞（MS10-047）

BUGTRAQ ID: 42221 CVE ID: CVE-2010-1830 Microsoft Windows是微软发布的非常流行的操作系统。 Windows内核验证内核对象访问控制列表的方式存在拒绝服务漏洞，攻击者可以通过运行特制的应用程序来利用这个漏洞导致系统变得没有响应并自动重启。 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 20...

PT-2010-2245 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: The issue arises from the Windows kernel-mode drivers not properly validating changes in certain kernel objects, allowing local users to execute arbitrary code. This could...

Improper Validation of Kernel Object Types

Improper Validation of Kernel Object Types Windows exposes many kernel features through a series of kernel objects''. These objects may be acted upon by user mode through the user of handles. Handles are integral values that are translated by the kernel into pointers to a particular object upon...

REVERSING MRXSMB.SYS CHAPTER II “NtClose DeadLock”

REVERSING MRXSMB.SYS CHAPTER II “NtClose DeadLock” Rubn Santamarta [email protected] www.reversemode.com May 15, 2006 Abstract Kernel Object Manager is prone to a deadlock situation which could be exploitable making unkillable any process running, complicating its elimination. INDEX...

A very ingenious process of anti-kill method-vulnerability warning-the black bar safety net

Just learn a kernel object,wanted to write one can be anti-kill process,but other methods are too high, The rookie is not a sense of Honor,thought a few days,think of a very present way,incorrect Also please master pointing about. The program runs two instances,each instance with each other to...