PT-2018-5057 · Invincea · Invincea-X

CVE-2016-9038

·

Publicado

2018-04-24

·

Atualizado

2022-12-13

CVSS v3.1

7.8

Alta

VetorAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Invincea-X version 6.1.3-24058
Description A double fetch vulnerability exists in the SboxDrv.sys driver functionality. This issue can be triggered by a specially crafted input buffer and a race condition, resulting in kernel memory corruption, which could lead to privilege escalation. An attacker needs to execute a special application locally to exploit this issue.
Recommendations For Invincea-X version 6.1.3-24058, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2016-9038

Produtos afetados

Invincea-X