CVE-2017-0220

Related Files

Microsoft Windows Kernel bind() Out-Of-Bounds Read

Posted May 16, 2017

Authored by Google Security Research, mjurczyk

Two related bugs have been discovered in the Microsoft Windows kernel code responsible for implementing the bind() socket function, specifically in the afd!AfdBind and tcpip!TcpBindEndpoint routines. They both can lead to reading beyond the allocated pool-based buffer memory area, potentially allowing user-mode applications to disclose kernel-mode secrets. They can also be exploited to trigger a blue screen of death and therefore a denial of service condition.

tags | exploit, denial of service, kernel

systems | windows

advisories | CVE-2017-0175, CVE-2017-0220

SHA-256 | 9b41916531e305ccf017e5064b5a3412788fbaa21187262224130f6886d5a773

Download | Favorite | View