29-07-25, 05:49 PM
thxxx
DOCUMENTS Windows Local Privilege Escalation CVE-2024-30088
by n3od4y - 07-08-24, 10:56 AM
 DarkForums Members
DarkForums Members
30-07-25, 06:15 AM
Ty sm
 DarkForums Members
24-10-25, 09:33 AM
ขอบคุณครับ
DarkForums Members
22-12-25, 12:42 AM
(07-08-24, 10:56 AM)n3od4y Wrote: When performing copy the SecurityAttributesList, the kernel setup the list of SecurityAttribute's structure *directly* to the user supplied pointer. After that, it calls to RtlCopyUnicodeString and AuthzBasepCopyoutInternalSecurityAttributeValues functions to copy out name and value of the SecurityAttribute structure, leading to multiple TOCTOU in this function tty DarkForums Members
24-12-25, 01:12 PM
(07-08-24, 10:56 AM)n3od4y Wrote: When performing copy the SecurityAttributesList, the kernel setup the list of SecurityAttribute's structure *directly* to the user supplied pointer. After that, it calls to RtlCopyUnicodeString and AuthzBasepCopyoutInternalSecurityAttributeValues functions to copy out name and value of the SecurityAttribute structure, leading to multiple TOCTOU in this function |
|
« Next Oldest | Next Newest »
|
Users browsing this thread: 2 Guest(s)