Microsoft Windows Kernel WMIDataDevice Pool Memory Disclosure

Microsoft Windows Kernel has an issue where the handler of the 0x224000 IOCTL (corresponding to the WmiQueryAllData functionality) implemented by the \\.\WMIDataDevice device in ntoskrnl.exe (as dispatched by the nt!WmipIoControl routine) discloses portions of uninitialized pool memory to user-mode clients.


MD5 | 83fbe445919ae11effcd075e5a7ea56b


Related Posts