Exploitation Summary
EIP tracks 2 public exploits for CVE-2015-1722. PoCs published by Nils Sommer.
AI-analyzed exploit summary This exploit triggers a use-after-free vulnerability in the Bitmap object, leading to a blue screen (BSOD) and potential arbitrary memory write. The PoC is unreliable without Special Pool but demonstrates the vulnerability effectively.
Description
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Microsoft Windows Kernel Bitmap Handling Use After Free Vulnerability."
Exploits (2)
This exploit triggers a use-after-free vulnerability in the Bitmap object, leading to a blue screen (BSOD) and potential arbitrary memory write. The PoC is unreliable without Special Pool but demonstrates the vulnerability effectively.
This exploit targets a use-after-free vulnerability in Windows 7 32-bit, specifically involving bitmap objects. The PoC demonstrates memory corruption by freeing a bitmap object while retaining a reference, which can lead to arbitrary code execution or crashes.