| शीर्षक | SOKNO S.R.L Speedfan 4.52 Memory Leak |
|---|
| विवरण | The driver of Speedfan speedfan.sys doesn't control MSR index when read it, That's why Security Researchers can leak memory using read c0000082 -LSTAR index , which the index holds address of KiSystemCall64 . During some research I found the offset of the KiSystemCall64 function 0x006BDE40 , When subtract it we can retrieve the base address of ntoskrnl.exe. This process causes the defeat of kASLR(kernel Address Space Layout Randomization). |
|---|
| स्रोत | ⚠️ https://drive.google.com/file/d/18ocvgZ9aYGpaqMuojNH1jzVpQ1AJBI7d/view?usp=sharing |
|---|
| उपयोगकर्ता | Raulisr00t (UID 99240) |
|---|
| सबमिशन | 23/06/2026 11:47 PM (2 महीनों पहले) |
|---|
| संयम | 09/08/2026 07:21 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 387275 [Almico Speedfan 4.52 MSR Index speedfan.sys KiSystemCall64 सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|