### CVE-2018-1038

#### 描述

Windows内核由于处理内存中对象的方式而存在特权提升漏洞

#### 影响版本

| Product             | CPU Architecture | Version | Update | Tested |
| ------------------- | ---------------- | ------- | ------ | ------ |
| Windows 7           | x86/x64          |         | SP1    |        |
| Windows Server 2008 | x86/x64          | R2      | SP1    |        |

#### 修复补丁

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1038
```

#### 利用方式

暂无找到可以测试通过的POC

#### 分析文章
- https://blog.xpnsec.com/total-meltdown-cve-2018-1038/
- https://www.anquanke.com/post/id/106156
- https://de4dcr0w.github.io/%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/CVE-2018-1038-TotalMeltdown%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%E7%9A%84%E4%B8%80%E7%82%B9%E8%AE%B0%E5%BD%95.html