CVE-2020-15479

Name of the Vulnerable Software and Affected Versions PassMark BurnInTest versions through 9.1 OSForensics versions through 7.1 PerformanceTest versions through 10

Description An issue was discovered that could lead to arbitrary Ring-0 code execution and escalation of privileges due to a buffer overflow. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size. This affects the DirectIo32.sys and DirectIo64.sys drivers.

Recommendations For PassMark BurnInTest versions through 9.1, update to a version that fixes the buffer overflow issue in the IOCTL request handler. For OSForensics versions through 7.1, update to a version that fixes the buffer overflow issue in the IOCTL request handler. For PerformanceTest versions through 10, update to a version that fixes the buffer overflow issue in the IOCTL request handler.