CVE-2017-15921: NULL Pointer Dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15920: NULL Pointer Dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

PT-2017-14285

Name of the Vulnerable Software and Affected Versions Watchdog Anti-Malware version 2.74.186.150 Online Security Pro version 2.74.186.150 Description The issue arises from a NULL pointer dereference vulnerability in the zam32.sys driver. This vulnerability is triggered when an operation is sent t...

PT-2017-14284

Name of the Vulnerable Software and Affected Versions Watchdog Anti-Malware version 2.74.186.150 Online Security Pro version 2.74.186.150 Description The issue arises from a NULL pointer dereference vulnerability in the zam32.sys driver. This vulnerability is triggered when an operation is sent t...

PT-2017-13980

Name of the Vulnerable Software and Affected Versions CPUID CPU-Z versions prior to 1.43 Description The issue allows for an arbitrary memory write, resulting in elevation of privileges. This can occur when any program running on the local machine issues an ioctl call to the kernel-mode driver...

CVE-2017-15302: Undefined Security Weakness

In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver e.g., cpuz143x64.sys for version 1.43 that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on t...

CVE-2017-15303: Out-of-bounds Write

In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machine while CPU-Z is running can issue an ioctl 0x9C402430 call to the kernel-mode driver e.g., cpuz141x64.sys for version 1.41...

file: Stack-based buffer overflow

Background file is a utility that guesses a file format by scanning binary data for patterns. Description An issue discovered in file allows attackers to write 20 bytes to the stack buffer via a specially crafted .notes section. Impact A remote attacker, by using a specially crafted .notes sectio...

CVE-2017-14088

Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary code and escalate privileges to resources normally reserved for the kernel on vulnerable installations by exploiting tmwfp.sys. An attacker must first obtain th...

CVE-2017-15037: Out-of-bounds Read

In FreeBSD through 11.1, the smbstrdupin function in sys/netsmb/smbsubr.c has a race condition with a resultant out-of-bounds read, because it can cause t2p-tname strings to lack a final '\0' character...

NetMechanica NetDecision Winring0x32.sys Driver Elevation of Privilege Vulnerability

NetMechanica NetDecision is a suite of network device monitoring software.Winring0x32.sys driver is one of the drivers. A security vulnerability exists in the Winring0x32.sys driver in NetMechanica NetDecision version 5.8.2. A local attacker can exploit this vulnerability to gain privileges with...

CVE-2017-14311

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

CVE-2017-14311

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

Code injection

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

CVE-2017-14311

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

CVE-2017-14311

The CVE-2017-14311 entry concerns the Winring0x32.sys driver in NetMechanica NetDecision 5.8.2. The connected sources confirm a local privilege escalation via a crafted 0x9C402088 IOCTL call, enabling a local attacker to gain privileges. Documents identify the affected component as the Winring0x3...

CVE-2017-14311: Undefined Security Weakness

The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call...

PT-2017-13382

Name of the Vulnerable Software and Affected Versions NetDecision version 5.8.2 Description The issue allows local users to gain privileges through a crafted 0x9C402088 IOCTL call to the Winring0x32.sys driver. Recommendations For NetDecision version 5.8.2, consider restricting access to the...

Netdecision 5.8.2 - Local Privilege Escalation Exploit

Exploit for windows platform in category local exploits // Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com...

Netdecision 5.8.2 - Local Privilege Escalation

Netdecision 5.8.2 - Local Privilege Escalation // Netdecision.cpp : Defines the entry point for the console application. / Exploit Title: Netdecision 5.8.2 - Local Privilege Escalation - Winring0x32.sys Date: 2017.09.17 Exploit Author: Peter Baris Vendor Homepage: www.netmechanica.com Software...