PT-2020-9222
CVE-2019-11867
·
تاريخ النشر
2020-02-12
·
تاريخ التحديث
2020-02-25
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Realtek NDIS driver rt640x64.sys version 10.1.505.2015
Description
The issue arises from the driver's failure to perform size checking on an input buffer from user space, assuming it has a size greater than zero bytes. An attacker can exploit this by sending an IRP with a system buffer size of 0.
Recommendations
For Realtek NDIS driver rt640x64.sys version 10.1.505.2015, consider disabling the driver until a patch is available to prevent exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾