Design/Logic Flaw

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

CVE-2019-8372

CVE-2019-8372 affects the LHA.sys driver in LG Device Manager (versions prior to 1.1.1811.2101). The root cause is that the device object has a symbolic link and an open DACL, enabling low-privileged users to read/write arbitrary physical memory via specially crafted IOCTL requests, thereby eleva...

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

PT-2019-18994 · Microsoft · Lha.Sys

Name of the Vulnerable Software and Affected Versions: LHA.sys driver versions prior to 1.1.1811.2101 Description: The issue allows low-privileged users to read and write arbitrary physical memory, potentially elevating system privileges. This is possible due to the device object having an...