Re:0patching a 0-day: Windows gdi32.dll memory disclosure
by j_s on Friday March 03, 2017 @09:32AM
(#13783051)
Can you please clarify whether or not this specific patch is user mode or kernel mode? @johntb86 mentioned GDI is split and this is the user mode part.
[ Parent
| on HN ]
Re:0patching a 0-day: Windows gdi32.dll memory disclosure
by dielel on Friday March 03, 2017 @09:45AM
(#13783152)
Our micropatch (7 of them, really, for 4 different Windows OS versions) for CVE-2017-0038 is user-mode. As are currently all our micropatches. Processes using gdi32.dll do not need to be relaunched to have it applied.