CVE-2018-20331

The CVE entry describes a local kernel-space vulnerability in Antiy AVL ATool v1.0.0.22. The flaw resides in the ssdt.sys driver’s handling of IOCTL 0x80002004, where insufficient validation of user-supplied data length can trigger a Kernel Pool Buffer Overflow. Exploitation by a locally privileg...

ATool 1.0.0.22 Buffer Overflow

Exploit Title: Kernel Pool Buffer Overflow ATool - 1.0.0.22 0day CVE: CVE-2018-20331 Date: 21-12-2018 Software Link: http://www.antiy.net/ Exploit Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage: http://www.antiy.net/ Category: Windows Attack Type: local...

Stack overflow

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-19650

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-19650

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-19650

Local attackers can trigger a stack-based buffer overflow on vulnerable installations of Antiy-AVL ATool security management v1.0.0.22. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2018-19650

CVE-2018-19650 : Local kernel-space stack-based buffer overflow in Antiy-AVL ATool security management v1.0.0.22, caused by improper validation of user-supplied data length in IOCTL 0x80002000 processed by the IRPFile.sys kernel driver. Exploitation can allow arbitrary code execution in the kerne...

Denial of Service Vulnerability in Antenna ATool Tools IRPFile.sys Driver

ATool is a professional system security inspection toolset designed for advanced user groups, which can analyze, diagnose and dispose of all kinds of common host problems and harmful files, as well as checking and repairing the system's sharing, account, patch and other information. A denial of...