PT-2018-5057 · Invincea · Invincea-X
CVE-2016-9038
·
Publicado
2018-04-24
·
Atualizado
2022-12-13
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Invincea-X version 6.1.3-24058
Description
A double fetch vulnerability exists in the SboxDrv.sys driver functionality. This issue can be triggered by a specially crafted input buffer and a race condition, resulting in kernel memory corruption, which could lead to privilege escalation. An attacker needs to execute a special application locally to exploit this issue.
Recommendations
For Invincea-X version 6.1.3-24058, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Invincea-X