Download
This is a proof of concept for CVE-2021-31166 ("HTTP Protocol Stack Remote Code Execution Vulnerability"), a use-after-free dereference in http.sys patched by Microsoft in May 2021. The bug itself happens in http!UlpParseContentCoding where the function has a local LIST_ENTRY and appends an item to it. When it's done, it moves it into the Request structure; but it doesn't NULL out the local list. The issue with that is that an attacker can trigger a code-path that frees every entry of the local list leaving them dangling in the Request object.
Features
- HTTP Protocol Stack Remote Code Execution Vulnerability
- Use-after-free dereference in http.sys patched by Microsoft in May 2021
- Bugcheck defined
- Remote HTTP.sys use-after-free triggered remotely
Project Samples
License
MIT LicenseFollow CVE-2021-31166
Other Useful Business Software
Earn up to 16% annual interest with Nexo.
Generate interest, access liquidity without selling, and execute trades seamlessly. All in one platform.
Geographic restrictions, eligibility, and terms apply.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of CVE-2021-31166!
