CVE-2023-2007: Time-of-check Time-of-use (TOCTOU) Race Condition

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the...

SUSE CVE-2023-2007

The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the...

Linux Kernel DPT I2O Controller Time-Of-Check Time-Of-Use Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DPT I2O...

Microsoft Windows智能输入/输出（I2O）本地权限提升漏洞

BUGTRAQ ID: 29171 CVECAN ID: CVE-2008-0322 Windows是微软发布的非常流行的操作系统。 i2omgmt.sys是Windows所使用的智能输入/输出（I2O）工具过滤器驱动。Windows XP操作系统所捆绑的i2omgmt.sys驱动对\.\I2OExc设备接口设置了Everyone写权限，因此任何本地登录的用户都可以访问仅为特权用户设计的功能。此外，该设备接口的IOCTL处理器没有正确地验证用户态缓冲区输入，攻击者可以向用户态地址提供伪造的DeviceObject指针，导致覆盖任意内存，以内核权限执行任意指令。 Microsoft...

iDefense Security Advisory 05.12.08: Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability

iDefense Security Advisory 05.12.08 http://labs.idefense.com/intelligence/vulnerabilities/ May 12, 2008 I. BACKGROUND Intelligent Input/Output I2O is a defunct computer input/output I/O specification. i2omgmt.sys is a Windows driver for the I2O Utility Filter. For more background information abou...

Microsoft Windows I2O driver privilege escalation

.I2OExc device weak permissions, IOCTL data insufficient validation...

CVE-2008-0322

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

Design/Logic Flaw

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

CVE-2008-0322

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...

CVE-2008-0322

The CVE-2008-0322 issue affects the I2O Utility Filter driver (i2omgmt.sys) version 5.1.2600.2180 on Windows XP. The .\

PT-2008-1956 · Microsoft · Windows Xp

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP Description: The issue allows local users to gain privileges by exploiting the I2O Utility Filter driver, which sets Everyone/Write permissions for the ".I2OExc" device interface. This can be leveraged to overwrite...

CVE-2008-0322: Incorrect Permission Assignment for Critical Resource

The I2O Utility Filter driver i2omgmt.sys 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call...