PT-2024-9820

CVE-2024-45383

·

تاريخ النشر

2024-06-24

·

تاريخ التحديث

2024-10-01

الوصف من

CVSS 3.1
5.0
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Microsoft High Definition Audio Bus Driver version 10.0.19041.3636
Description: A mishandling of IRP requests vulnerability exists in the HDAudBus DMA interface of Microsoft High Definition Audio Bus Driver. This vulnerability can be exploited by a specially crafted application issuing multiple IRP Complete requests, leading to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability, potentially allowing the execution of arbitrary code or causing a denial-of-service.
Recommendations: For Microsoft High Definition Audio Bus Driver version 10.0.19041.3636, patch the driver to mitigate the local attack risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾