CVE-2020-1015

描述

用户模式电源服务（UMPS）处理内存中的对象异常

影响版本

Product	Version	Update	Edition	Tested
Windows 7	X86/x64		SP1
Windows 8.1	X86/x64
Windows 10	X86/x64
Windows 10	X86/x64	1607
Windows 10	X86/x64/ARM64	1709
Windows 10	X86/x64/ARM64	1803
Windows 10	X86/x64/ARM64	1809
Windows 10	X86/x64/ARM64	1903
Windows 10	X86/x64/ARM64	1909		✔
Windows Server 2008	x64	R2	SP1
Windows Server 2012
Windows Server 2012		R2
Windows Server 2016
Windows Server 2019
Windows Server		1803
Windows Server		1903
Windows Server		1909

修复补丁

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1015

利用方式

原文的编译方式

1. Create an empty C++ project in Visual Studio.
2. Add cve_2020_1015.cpp and Source.idl to the project as source files.
3. Compile Source.idl. This will generate three files: Source_c.c, Source_h.h and Source_s.c.
4. Add the first two as source files to the project.
5. Add rpcrt4.lib as an additional dependency to the project
6. Build!

本项目中编译方式（直接编译）

• VS2019（V142）X86 Release

测试机器Windows 10 1909 X64，会使CPU跑满导致蓝屏

分析文章

• https://0xeb-bp.com/blog/2020/05/12/cve-2020-1015-analysis.html
• https://www.anquanke.com/post/id/217526

脚本来源

• 0xeb-bp