Microsoft Windows Kernel nt!NtTraceControl Memory Disclosure

The handler of the nt!NtTraceControl system call (specifically the EtwpSetProviderTraitsUm functionality, opcode 0x1E) discloses portions of uninitialized pool memory to user-mode clients on Microsoft Windows 10 systems.


MD5 | 699f4cfcc05dedec9020e6ad6bfac9f4


Related Posts