MS11-077 .fon Kernel-Mode Buffer Overrun PoC

🗓️ 13 Oct 2011 00:00:00Reported by RootType

MS11-077 .fon Kernel-Mode Buffer Overrun PoC by Byoungyoung Lee for Windows 7 32bi

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2011-2003	13 Oct 201100:00	–	circl
Check Point Advisories	Portable Executable (PE) 16-bit File	11 Oct 201100:00	–	checkpoint_advisories
Check Point Advisories	Preemptive Protection against Microsoft Windows Kernel Font Library File Buffer Overrun (MS11-077; CVE-2011-2003)	11 Oct 201100:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Font Library File Buffer Overflow (CVE-2011-2003)	19 Mar 201200:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Font Library File Buffer Overflow - Ver2 (CVE-2011-2003)	16 Apr 201400:00	–	checkpoint_advisories
Check Point Advisories	Portable Executable (PE) 16-bit File (CVE-2010-0232; CVE-2011-2003)	28 Feb 201000:00	–	checkpoint_advisories
CVE	CVE-2011-2003	12 Oct 201101:00	–	cve
Cvelist	CVE-2011-2003	12 Oct 201101:00	–	cvelist
Exploit DB	Microsoft Windows - '.fon' Kernel-Mode Buffer Overrun (PoC) (MS11-077)	13 Oct 201100:00	–	exploitdb
exploitpack	Microsoft Windows - .fon Kernel-Mode Buffer Overrun (PoC) (MS11-077)	13 Oct 201100:00	–	exploitpack


                                                # Exploit Title: MS11-077 .fon buffer overrun kernel-mode drivers exploit
# Google Dork: [if relevant] �(we will automatically add these to the GHDB)
# Date: 10/12/2011
# Author: Byoungyoung Lee, http://www.cc.gatech.edu/~blee303/
# Software Link:
# Version: Windows 7 32bit, fully patched until Sep. 2011
# Tested on: Windows 7 32bit
# CVE : CVE-2011-2003
 
Exploit is downloadable from:
 
http://sebug.net/paper/other/my.fon.tar.gz
 
http://exploitshop.wordpress.com/2011/10/12/ms11-077-vulnerabilities-in-windows-kernel-mode-drivers-could-allow-remote-code-execution-2567053/
 
Byoungyoung

13 Oct 2011 00:00Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.49398