Lucene search
K

5 matches found

OSV
OSV
added 2019/02/18 3:29 p.m.2 views

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

7CVSS7.2AI score0.00056EPSS
Exploits1References3
Prion
Prion
added 2019/02/18 3:29 p.m.13 views

Design/Logic Flaw

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

6.9CVSS6.6AI score0.00056EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2019/02/18 3:0 p.m.13 views

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

6.7AI score0.00056EPSS
Exploits1References3
CVE
CVE
added 2019/02/18 3:0 p.m.46 views

CVE-2019-8372

CVE-2019-8372 affects the LHA.sys driver in LG Device Manager (versions prior to 1.1.1811.2101). The root cause is that the device object has a symbolic link and an open DACL, enabling low-privileged users to read/write arbitrary physical memory via specially crafted IOCTL requests, thereby eleva...

7CVSS6.8AI score0.00056EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/02/18 12:0 a.m.2 views

PT-2019-18994 · Microsoft · Lha.Sys

Name of the Vulnerable Software and Affected Versions: LHA.sys driver versions prior to 1.1.1811.2101 Description: The issue allows low-privileged users to read and write arbitrary physical memory, potentially elevating system privileges. This is possible due to the device object having an...

7CVSS6.8AI score0.00056EPSS
Exploits1References5
Rows per page
Query Builder