HexBrain

Internet Bug Bounty · Report #48100

Bad Write in TTF font parsing (win32k.sys)

Validstatus
2upvotes
1 Mar 2015disclosed

How it was found

This bug was originally reported through Project Zero at Google. Alex Rice suggested to me that I could potentially receive a bounty through Hacker One so I am also opening a report here.

The vulnerability reference numbers are MS15-010 CVE-2015-0059

The original bug report is https://code.google.com/p/google-security-research/issues/detail?id=172

Microsoft released a patch on 2/10/15 https://technet.microsoft.com/library/security/dn903755.aspx

Repros, loader, and minidumps are attached

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original