CVE-XXXX-XXXX

Binary Exploitation

Problem Description

Author: Mubarak Mikail
Description

Enter the CVE of the vulnerability as the flag with the correct flag format: picoCTF{CVE-XXXX-XXXXX} replacing XXXX-XXXXX with the numbers for the matching vulnerability.
The CVE we’re looking for is the first recorded remote code execution (RCE) vulnerability in 2021 in the Windows Print Spooler Service,
which is available across desktop and server versions of Windows operating systems. The service is used to manage printers and print servers.

Write Up

You can search for CVEs on the internet, so searching for “CVE, 2021, RCE, Windows Print Spooler Service” will give good results.
Since this CVE was first published in 2021, the CVE will start out with “CVE-2021”. This CVE was common to virtually all versions of the Windows OS still in use, and caused Microsoft to release a patch for Windows version that were no longer supported.

Flag

picoCTF{CVE-2021-34527}