Exploit for Immunity Canvas: SETIMEINFOEX_LPE CVE-2018-8120

canvas · 2018-05-09

Description

SetImeInfoEx LPE, CVE-2018-8120, Windows 7, Vista, 2008 R

Affected software

Microsoft Windows 7 All versions

Microsoft Windows Server 2008 All versions

All known vulnerabilities by product

CVSS 7.2 for CVE-2018-8120

7.2

HIGH SEVERITY

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:LOCAL

Attack Complexity:HIGH

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

73.7%higher than 99.4% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2018-05-09 19:29

Last Seen:2021-07-28 14:33

Reporter:Immunity Canvas

Tags

setimeinfoexCVE-2018-8120windows 7vista2008 r2microsoftexploit

Other exploits for CVE-2018-8120

Exploit for CVE-2017-0213

2021-05-02 mining.wangGITEE

Exploit for Improper Resource Shutdown or Release in Microsoft

2020-07-15 DJ丶乔丹GITEE

Exploit for Improper Resource Shutdown or Release in Microsoft

2020-04-01 东方GITEE

Exploit for CVE-2017-0213

2020-02-18 n0sGITEE

Exploit for Improper Resource Shutdown or Release in Microsoft

2020-02-11 mambaGITEE

Microsoft Windows SetImeInfoEx Win32k NULL Pointer Dereference Exploit

2018-10-22 Dhiraj MishraZDTRuby

Microsoft Windows - SetImeInfoEx Win32k NULL Pointer Dereference (Metasploit)

2018-10-22 MetasploitEXPLOITDBRuby

Microsoft Windows SetImeInfoEx Win32k NULL Pointer Dereference

2018-10-19 unamerPACKETSTORMRuby

Exploit Code

MARKDOWN17 lines

## https://sploitus.com/exploit?id=SETIMEINFOEX_LPE
**Name**|  setimeinfoex_lpe  
---|---  
**CVE**|  CVE-2018-8120  
**Exploit Pack**|  [CANVAS](<http://http://www.immunityinc.com/products-canvas.shtml>)  
**Description**| SetImeInfoEx LPE  
**Notes**| CVE Name: CVE-2018-8120  
Notes:   
Tested:  
Windows 7 x64  
Windows 7 x86  
Windows Vista x86  
Windows 2008 R2 x64  
  
VENDOR: Microsoft  
CVE Url: https://nvd.nist.gov/vuln/detail/CVE-2018-8120  
CVSS: 7.0