0day/00-CVE_EXP/CVE-2019-1132

CVE-2019-1132

Describe

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'.

ImpactVersion

Product	CPU Architecture	Version	Update	Tested
Windows Server 2008	x64/x86		SP2
Windows Server 2008		R2	SP1
Windows 7	x64/x86		SP1

Patch

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1132

Utilization

None

Analyze

• https://zhuanlan.zhihu.com/p/335166796
• https://ti.qianxin.com/blog/articles/buhtrap-cve-2019-1132-attack-event-related-vulnerability-sample-analysis/
• https://www.welivesecurity.com/2019/07/10/windows-zero-day-cve-2019-1132-exploit/
• https://www.anquanke.com/post/id/181794