# kernel pool

Published articles for kernel pool.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## First dip into the kernel pool : MS10-058

DevFeed: [First dip into the kernel pool : MS10-058](<https://devfeed.tech/articles/first-dip-into-the-kernel-pool-ms10-058-39693.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/03/11/first-dip-into-the-kernel-pool-ms10-058/>)

Author: Jeremy "\_\_x86" Fetiveau

Published: 2014-03-11T09:52:37Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [integer-overflow](<https://devfeed.tech/tags/integer-overflow.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [kernel-pool](<https://devfeed.tech/tags/kernel-pool.md>), [memory-corruption](<https://devfeed.tech/tags/memory-corruption.md>), [ms10-058](<https://devfeed.tech/tags/ms10-058.md>), [poc](<https://devfeed.tech/tags/poc.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [tcpip-sys](<https://devfeed.tech/tags/tcpip-sys.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This tutorial explores a proof-of-concept exploit for the MS10-058 vulnerability in Windows 7 kernel pool memory management. It explains how an integer overflow in tcpip.sys causes an undersized non-paged pool allocation and subsequent pool overflow, based on the author's testing in a Windows 7 32-bit virtual machine.

### Source excerpt

Introduction I am currently playing with pool-based memory corruption vulnerabilities. That's why I wanted to program a PoC exploit for the vulnerability presented by Tarjei Mandt during his first talk "Kernel Pool Exploitation on Windows 7" [3]. I think it's a good exercise to start learning about pool overflows ...