Lucene search
MitreCVELIST:CVE-2021-31727HistoryMay 17, 2021 - 12:05 p.m.
CVE-2021-31727
2021-05-1712:05:50
mitre
www.cve.org
0.0004 Low
EPSS
Percentile
12.7%
Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 where IOCTL’s 0x80002014, 0x80002018 expose unrestricted disk read/write capabilities respectively. A non-privileged process can open a handle to .\ZemanaAntiMalware, register with the driver using IOCTL 0x80002010 and send these IOCTL’s to escalate privileges by overwriting the boot sector or overwriting critical code in the pagefile.
Related
nvd
nvd
CVE-2021-31727
2021-05-17 13:15:07
cve
cve
CVE-2021-31727
2021-05-17 13:15:07
prion
prion
Design/Logic Flaw
2021-05-17 13:15:00
githubexploit
githubexploit
Exploit for Incorrect Authorization in Malwarefox Antimalware
2021-05-04 17:15:58