CVE-2019-1408: Windows win32k.sys Out-Of-Bounds Write Privilege Escalation

Vulnerability Key Information Vulnerability Overview Vulnerability Name: Microsoft Windows uIGetNearestIndexFromColorref Out-Of-Bounds Write Privilege Escalation Vulnerability Vulnerability IDs: - ZDI-19-976 - ZDI-CAN-9100 - CVE-2019-1408 CVSS Score CVSS Score: 8.8 CVSS Vector: AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Vendors and Products Affected Vendor: Microsoft Affected Product: Windows Vulnerability Details Vulnerability Description: This vulnerability allows a local attacker to escalate privileges on affected Microsoft Windows installations. The attacker must first gain the ability to execute low-privilege code on the target system in order to exploit this vulnerability. Specific Flaw: A specific flaw exists within the uIGetNearestIndexFromColorref function in win32k.sys. Due to insufficient validation of user-supplied data, this flaw may result in out-of-bounds writes to allocated arrays. Attackers can exploit this vulnerability to escalate privileges and execute code in the context of SYSTEM. Patch Information and Disclosure Timeline Patch Information: Microsoft has released an update to fix this vulnerability. More details can be found at the following link: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1408 Disclosure Timeline: - 2019-08-07 - Vulnerability reported to vendor - 2019-11-13 - Coordinated public advisory release Discoverer Discoverer: Marcin Wiazowski

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2019-1408: Windows win32k.sys Out-Of-Bounds Write Privilege Escalation