Microsoft Windows suffers from missing ACE bounds checks in the routine nt!SeObjectCreateSaclAccessBits(). Proof of concept code included.
259d5cace1e4bcf5c3aa4140a1b61fc737a3cab09f0850b31a0823faf215291f
© 2022 Packet Storm. All rights reserved.