windowsxp核心驅(qū)動(dòng)afdsys本地權(quán)限提升漏洞分析(編輯修改稿)
2024-09-13 00:01 本頁面
【文章內(nèi)容簡(jiǎn)介】 60。 jmp short loc_17DE7PAGE:00017DBBPAGE:00017DBB 。 PAGE:00017DBD align 10hPAGE:00017DC0 db 2 dup(90h)PAGE:00017DC2 。 PAGE:00017DC2PAGE:00017DC2 loc_17DC2: DATA XREF: .rdata:00011B04oPAGE:00017DC2 lea eax, [ebp1Ch]PAGE:00017DC5 pusheaxPAGE:00017DC6 pushdword ptr [ebp14h]PAGE:00017DC9 callAfdExceptionFilter(x,x)PAGE:00017DC9PAGE:00017DCE retn在看看補(bǔ)丁的情況PAGE:00017D17 。 int __stdcall AfdGetRemoteAddress(int,int,char,int,int,PVOID Address,int,int)PAGE:00017D17 __stdcall AfdGetRemoteAddress(x, x, x, x, x, x, x, x) proc nearPAGE:00017D17 。 DATA XREF: .data:0001230CoPAGE:00017D17PAGE:00017D17 var_24= dword ptr 24hPAGE:00017D17 var_20= dword ptr 20hPAGE:00017D17 var_1C= dword ptr 1ChPAGE:00017D17 ms_exc= CPPEH_RECORD ptr 18hPAGE:00017D17 arg_0 = dword ptr8PAGE:00017D17 arg_8 = byte ptr10hPAGE:00017D17 Address = dword ptr1ChPAGE:00017D17 arg_18= dword ptr20hPAGE:00017D17 arg_1C= dword ptr24hPAGE:00017D17PAGE:00017D17 push14hPAGE:00017D19 pushoffset unk_11B00PAGE:00017D1E call__SEH_prologPAGE:00017D1EPAGE:00017D23 mov eax, [ebp+arg_0]PAGE:00017D26 mov ebx, [eax+0Ch]PAGE:00017D29 mov [ebp+var_24], ebxPAGE:00017D2C xor esi, esiPAGE:00017D2E mov eax, [ebp+arg_1C]PAGE:00017D31 mov [eax], esiPAGE:00017D33 pushebxPAGE:00017D34 callAfdLockEndpointContext(x)PAGE:00017D34PAGE:00017D39 mov [ebp+var_20], eaxPAGE:00017D3C cmp eax, esiPAGE:00017D3E jzloc_17DDBPAGE:00017D3EPAGE:00017D44 cmp word ptr [ebx], 0AFD2hPAGE:00017D49 jnz loc_17DDBPAGE:00017D49PAGE:00017D4F160
環(huán)評(píng)公示相關(guān)推薦
鄂ICP備17016276號(hào)-1