CVE-2018-9190

A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...

CVE-2018-9190

Fortinet FortiClient Windows has a NULL pointer dereference in the NDIS Miniport driver that affects FortiClient.exe prior to version 6.0.3. The issue, caused by missing NULL checks before indirect calls, can be exploited by a local attacker to cause a denial of service. A fix is available in For...

CVE-2018-9190: NULL Pointer Dereference

A null pointer dereference vulnerability in Fortinet FortiClientWindows 6.0.2 and earlier allows attacker to cause a denial of service via the NDIS miniport driver...

FortiClient NDIS Miniport Driver Null Pointer Dereference

There is a Null pointer dereference in the NDIS Miniport drivers in FortiClient on Windows, which may be leveraged by an unprivileged user to cause a Denial of Service BSOD...

PT-2019-6276

Name of the Vulnerable Software and Affected Versions FortiClient for Windows versions 6.0.2 and earlier Description The issue is related to a null pointer dereference vulnerability in the NDIS miniport driver of Fortinet FortiClient for Windows. This vulnerability can be exploited to cause a...

CVE-2018-8342

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID...

CVE-2018-8343

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

Privilege escalation

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID...

Privilege escalation

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

CVE-2018-8342

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2008 R2. This CVE ID...

CVE-2018-8343

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

CVE-2018-8342

Summary (CVE-2018-8342): A local elevation-of-privilege flaw in Microsoft Windows’ Network Driver Interface Specification (NDIS) due to ndis.sys not validating the buffer length before copying memory. Affected: Windows 7 and Windows Server 2008 R2. Root cause: buffer-length check missing during m...

CVE-2018-8343

CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...

Microsoft Windows NDIS Local Elevation of Privilege Vulnerability (CNVD-2018-19396)

Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 are operating systems released by Microsoft Corporation.Microsoft Windows 7 SP1 is an operating system for personal computers.Windows Server 2008 R2 SP1 is an operating system for servers. Network Driver Interface Specification NDIS is one of...

Microsoft Windows Multiple Vulnerabilities (KB4343900)

This host is missing a critical security update according to Microsoft KB4343900 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4343885)

This host is missing a critical security update according to Microsoft KB4343885 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4343887)

This host is missing a critical security update according to Microsoft KB4343887 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

KLA11789 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Eextended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...