2052 matches found
Unspecified Vulnerability in Rivet Killer Control Center (CNVD-2020-19858)
Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability exists in Rivet Killer Control Center, an issue was discovered in Rivet Killer Control Center prior to...
Rivet Killer Control Center Elevation of Privilege Vulnerability
Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability has been identified in Rivet Killer Control Center, Rivet Killer Control Center before 2.1.1352.IOCTL 0x120004...
CVE-2019-15664
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...
CVE-2019-15662
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...
CVE-2019-15665
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges...
Out-of-bounds
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...
Out-of-bounds
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...
CVE-2019-15664
An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...
CVE-2019-15663
The CVE-2019-15663 issue affects Rivet Killer Control Center (before 2.1.1352). IOCTL 0x120404 in KfeCo10X64.sys does not validate an offset during a memory operation, causing an out-of-bounds read that can be used as part of a chain to escalate privileges. Documents consistently describe the imp...
The vulnerability of the igdkmd64.sys driver for Intel Graphics Drivers, related to an error in path traversal, allows attackers to escalate their privileges and cause service failures.
The vulnerability of the igdkmd64.sys driver for Intel Graphics Drivers is related to a path traversal error. Exploiting this vulnerability can allow an attacker to increase their privileges and cause service interruptions...
GLSA-202003-31 : gdb: Buffer overflow
The remote host is affected by the vulnerability described in GLSA-202003-31 gdb: Buffer overflow It was discovered that gdb didnt properly validate the ELF section sizes from input file. Impact : A remote attacker could entice a user to open a specially crafted ELF binary using gdb, possibly...
gdb: Buffer overflow
Background gdb is the GNU project’s debugger, facilitating the analysis and debugging of applications. The BFD library provides a uniform method of accessing a variety of object file formats. Description It was discovered that gdb didn’t properly validate the ELF section sizes from input file...
file: Heap-based buffer overflow
Background file is a utility that guesses a file format by scanning binary data for patterns. Description It was discovered that file incorrectly handled certain malformed files. Impact A remote attacker could entice a user to process a specially crafted file via libmagic or file, possibly...
CVE-2020-0520
Path traversal in igdkmd64.sys for IntelR Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access...
Path traversal
Path traversal in igdkmd64.sys for IntelR Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access...
CVE-2020-0520
CVE-2020-0520 is a path traversal vulnerability in igdkmd64.sys affecting Intel Graphics Drivers prior to 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100. The underlying issue allows an authenticated local attacker with low privileges to potentially escalate privileges or cause a De...
CVE-2020-0520
Path traversal in igdkmd64.sys for IntelR Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access...
SMBGhost – Analysis of CVE-2020-0796
ARCHIVED STORY SMBGhost – Analysis of CVE-2020-0796 By Eoin Carrol - March 12, 2020 The Vulnerability The latest vulnerability in SMBv3 is a “wormable” vulnerability given its potential ability to replicate or spread over network shares using the latest version of the protocol SMB 3.1.1. As of...
CVE-2019-11867
CVE-2019-11867 affects Realtek NDIS driver rt640x64.sys (version 10.1.505.2015). The driver does not validate the size of a user-space input buffer, assuming a non-zero length. An attacker must send an IRP with a system buffer size of 0, enabling a local access scenario. CVSS data from the source...