The vulnerabilities of the information protection systems Secret Net and Secret Net Studio allow attackers to bypass the DSE protection mechanisms and increase their privileges.

The vulnerability of the kernel driver sncc0.sys of the Secret Net information protection system and Secret Net Studio relates to the transfer of pointers from the user-mode application to the kernel driver through the IOCTL input buffer in the Sub180009D50 function. Exploiting this vulnerability...