My slide of cansecwest2017

"Win2k Dark Composition: Attacking the Shadow part of Graphic subsystem"

About the two POC:

1. We used in pwnfest2016.
2. What we talk in cansecwest2017.
3. MS fix them in patch-day of March 2017.
4. 为啥没写CVE号,因为微软的同志又双叒叕把致谢信息搞错了.