# ms10-058

Published articles for ms10-058.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## First dip into the kernel pool : MS10-058

DevFeed: [First dip into the kernel pool : MS10-058](<https://devfeed.tech/articles/first-dip-into-the-kernel-pool-ms10-058-39693.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2014/03/11/first-dip-into-the-kernel-pool-ms10-058/>)

Author: Jeremy "\_\_x86" Fetiveau

Published: 2014-03-11T09:52:37Z

Content type: tutorial

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [integer-overflow](<https://devfeed.tech/tags/integer-overflow.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [kernel-pool](<https://devfeed.tech/tags/kernel-pool.md>), [memory-corruption](<https://devfeed.tech/tags/memory-corruption.md>), [ms10-058](<https://devfeed.tech/tags/ms10-058.md>), [poc](<https://devfeed.tech/tags/poc.md>), [reverse-engineering](<https://devfeed.tech/tags/reverse-engineering.md>), [tcpip-sys](<https://devfeed.tech/tags/tcpip-sys.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This tutorial explores a proof-of-concept exploit for the MS10-058 vulnerability in Windows 7 kernel pool memory management. It explains how an integer overflow in tcpip.sys causes an undersized non-paged pool allocation and subsequent pool overflow, based on the author's testing in a Windows 7 32-bit virtual machine.

### Source excerpt

Introduction I am currently playing with pool-based memory corruption vulnerabilities. That's why I wanted to program a PoC exploit for the vulnerability presented by Tarjei Mandt during his first talk "Kernel Pool Exploitation on Windows 7" [3]. I think it's a good exercise to start learning about pool overflows ...