基于Windows平台的RPC缓冲区溢出漏洞研究

The Research of RPC Overflow Vulnerability

Windows系统中潜在的RPC缓冲区溢出漏洞是目前信息系统面临的最严重安全威胁之一。本文介绍了RPC原理,分析了缓冲区溢出的原理,总结了RPC漏洞分析的一般方法,并针对一个RPC漏洞进行了详细分析,包括定位溢出函数,分析溢出点,溯源和溢出实现。

The RPC overflow vulnerability existing in Windows operating system constitute one of the most serious security threat towards computer network. In this paper the principles of RPC are introduced, theories of buffer overflow are analyzed and the methods of analyzing the RPC overflow vulnerability are also summarized. In allusion to a vulnerability it analyzes the process of the RPC overflow vulnerability exploit, including locking overflow function, analyzing overflow point and achieving exploit.