CVE-2007-1212

This exploit targets a vulnerability in Microsoft Windows GDI (CVE-2007-1212) via a maliciously crafted .ANI file, leading to remote elevation of privilege. The exploit leverages a buffer overflow in the handling of animated cursor files to execute arbitrary code.

This exploit leverages a GDI local privilege escalation vulnerability (CVE-2007-1212) by manipulating a palette object's kernel pointer in shared memory to execute arbitrary code in kernel mode. It demonstrates the vulnerability by hooking the GetNearestPaletteIndex function to gain elevated privileges.

This is a functional local privilege escalation exploit for CVE-2007-1212, targeting a vulnerability in the Windows GDI subsystem (MS07-017). It manipulates the GDI table to overwrite a win32k.sys SSDT entry, allowing arbitrary kernel code execution via a crafted payload.