Microsoft Windows 8.1 (x64) - RGNOBJ Integer Overflow (MS16-098) (2)

Author: SensePost
type: local
platform: windows_x86-64
port: 
date_added: 2017-08-08 
date_updated: 2017-08-09 
verified: 1 
codes: MS16-098 
tags: Local
aliases:  
screenshot_url:  
application_url: 

Sources:
- https://github.com/sensepost/gdi-palettes-exp
- https://sensepost.com/blog/2017/abusing-gdi-objects-for-ring0-primitives-revolution/

Windows 7 SP1 x86 exploit presented at DEF CON 25 involving the abuse of a newly discovered GDI object abuse technique.

DC25 5A1F - Demystifying Windows Kernel Exploitation by Abusing GDI Objects

- https://www.defcon.org/html/defcon-25/dc-25-speakers.html#El-Sherei
- https://media.defcon.org/DEF%20CON%2025/DEF%20CON%2025%20presentations/5A1F/


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42435.zip