CVE-2021-40424

Name of the Vulnerable Software and Affected Versions Webroot Secure Anywhere version 21.4

Description An out-of-bounds read issue exists in the IOCTL GetProcessCommand and B 03 of Webroot Secure Anywhere. A specially-crafted executable can lead to denial of service. An attacker can issue an ioctl to trigger this issue. The GetProcessCommandLine IOCTL request could cause an out-of-bounds read in the device driver WRCore x64.

Recommendations For Webroot Secure Anywhere version 21.4, consider restricting access to the IOCTL GetProcessCommand and B 03 until a patch is available. As a temporary workaround, avoid using the GetProcessCommandLine IOCTL request in the device driver WRCore x64 to minimize the risk of exploitation.