TrueCrypt Integer Overflow Vulnerability

TrueCrypt is an open source virtual encryption disk encryption software that creates virtual disks on your hard drive without generating any files. An integer overflow vulnerability exists in TrueCrypt version 7.1a. A local attacker can exploit this vulnerability to obtain sensitive information o...

TrueCrypt Security Bypass Vulnerability

TrueCrypt is an open source virtual encryption disk encryption software that creates virtual disks on your hard drive without generating any files. A security vulnerability exists in the 'ProcessVolumeDeviceControlIrp' function of the Ntdriver.c file in TrueCrypt version 7.1a. A local attacker ca...

CVE-2014-2885

Multiple integer overflows in TrueCrypt 7.1a allow local users to 1 obtain sensitive information via vectors involving a crafted item-OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or 2 cause a denial of service memory consumption via vectors involving large...

Integer overflow

Multiple integer overflows in TrueCrypt 7.1a allow local users to 1 obtain sensitive information via vectors involving a crafted item-OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or 2 cause a denial of service memory consumption via vectors involving large...

CVE-2014-2884

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...

Design/Logic Flaw

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...

CVE-2014-2884

CVE-2014-2884 concerns TrueCrypt 7.1a. The vulnerability is in the Ntdriver.c function ProcessVolumeDeviceControlIrp, where local users can bypass access restrictions and obtain sensitive information about arbitrary files through two IOCTL calls: TC_IOCTL_OPEN_TEST and TC_IOCTL_GET_SYSTEM_DRIVE_C...

CVE-2014-2885

Concrete details from connected documents show that CVE-2014-2885 affects TrueCrypt 7.1a via two integer-overflow vectors: (1) OriginalLength handling in EncryptedIoQueue.c:MainThreadProc, enabling local information disclosure; (2) large StartingOffset/Length handling in Ntdriver.c:ProcessVolumeD...

CVE-2014-2885

Multiple integer overflows in TrueCrypt 7.1a allow local users to 1 obtain sensitive information via vectors involving a crafted item-OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or 2 cause a denial of service memory consumption via vectors involving large...

CVE-2014-2884

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...

CVE-2014-2884: Exposure of Sensitive Information to an Unauthorized Actor

The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...

CVE-2014-2885: Integer Overflow or Wraparound

Multiple integer overflows in TrueCrypt 7.1a allow local users to 1 obtain sensitive information via vectors involving a crafted item-OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or 2 cause a denial of service memory consumption via vectors involving large...

Linux Memory Cryptographic Keys Extractor: CryKeX

Some work has been already published regarding the subject of cryptograhic keys security within DRAM. Basically, we need to find something that looks like a key entropic and specific length and then confirm its nature by analyzing the memory structure around it C data types. The idea is to dump...

Parrot Security 3.9 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Security GNU/Linux distribution designed with cloud pentesting and IoT security in mind. It includes a full portable laboratory for security and digital forensics experts, but it also includes all you need to develop your own softwares or protect your privacy with anonymity and crypto tools...

CVE-2015-7359

The 1 IsVolumeAccessibleByCurrentUser and 2 MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level an...

CVE-2015-7358

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges...

Code injection

The 1 IsVolumeAccessibleByCurrentUser and 2 MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level an...

CVE-2015-7358: Undefined Security Weakness

The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges...

CVE-2015-7359: Undefined Security Weakness

The 1 IsVolumeAccessibleByCurrentUser and 2 MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level an...

CVE-2015-7359

CVE-2015-7359 concerns the Windows kernel driver in TrueCrypt 7.0, VeraCrypt (before 1.15), and CipherShed. The flaw: IsVolumeAccessibleByCurrentUser and MountDevice do not validate the impersonation level of tokens, allowing local users to impersonate a user at SecurityIdentify level and access ...