Analysis of CVE-2019-0708 (BlueKeep) – MalwareTech

Analysis of CVE-2019-0708 (BlueKeep) – MalwareTech

I held back this write-up until a proof of concept (PoC) was publicly available, as not to cause ...概要を表示 I held back this write-up until a proof of concept (PoC) was publicly available, as not to cause any harm. Now that there are multiple denial-of-service PoC on github, I’m posting my analysis. Binary Diffing As always, I started with a BinDiff of the binaries modified by the patch (in this case there is only one: TermDD.sys). Below we can see the results. A BinDiff of TermDD.sys pre and post patch