CVE-2020-17057 PoC — Windows Win32k Elevation of Privilege Vulnerability

Source

https://github.com/lsw29475/CVE-2020-17057

Associated Vulnerability

Title:Windows Win32k Elevation of Privilege Vulnerability (CVE-2020-17057)
Description:Windows Win32k Elevation of Privilege Vulnerability

Readme

I wrote this exp based on this blog（https://blogs.360.cn/post/CVE-2020-17057%20detail%20and%20exploit.html），But I ended up with only palette objects with dangling data pointer.
Because of type isolation, I can't get arbitrary R/W primitives by using palettes or bitmap objects，If you have a way to get arbitrary R/W primitives or continue to write 
this exp，Please contact me，thanks

File Snapshot


 [4.0K]  /data/pocs/c504bf3a3418a6df28a2c55507693e853ee3a6db
├── [ 489]  asm.asm
├── [8.2K]  exp.cpp
└── [ 395]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →