Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-1344. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit demonstrates a Windows kernel crash (BSOD) in CI!CipFixImageType due to improper validation of the IMAGE_FILE_HEADER.SizeOfOptionalHeader field in a malformed PE file. The vulnerability is triggered when LoadLibraryEx with LOAD_LIBRARY_AS_DATAFILE or LOAD_LIBRARY_AS_IMAGE_RESOURCE is called, leading to an out-of-bounds read and system panic.
Description
An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.
Exploits (1)
The exploit demonstrates a Windows kernel crash (BSOD) in CI!CipFixImageType due to improper validation of the IMAGE_FILE_HEADER.SizeOfOptionalHeader field in a malformed PE file. The vulnerability is triggered when LoadLibraryEx with LOAD_LIBRARY_AS_DATAFILE or LOAD_LIBRARY_AS_IMAGE_RESOURCE is called, leading to an out-of-bounds read and system panic.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N