6552 matches found
CVE-2018-3990
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An...
Memory corruption
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An...
CVE-2018-3990
CVE-2018-3990 concerns WIBU-SYSTEMS WibuKey.sys (Version 6.40, Build 2400). The vulnerability exists in the 0x8200E804 IOCTL handler; a specially crafted IRP can trigger a buffer overflow, causing kernel memory corruption and potentially privilege escalation. Talos reports this vulnerability can ...
CVE-2018-3990
An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An...
Marvell Avastar wireless SoCs have multiple vulnerabilities
Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...
HEVD pool overflow analysis-vulnerability warning-the black bar safety net
Prepare the environment Win 10 64-bit host + win 7 32-bit virtual machine Windbg: a debugger VirtualKD-3.0: double-click the debug tool InstDrv: the drive is installed, run the tool HEVD: a Windows kernel vulnerability training project, which almost covers the kernel may exist, all vulnerability...
WIBU-SYSTEMS WibuKey.sys 0x8200E804 pool corruption privilege escalation vulnerability
Summary An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 Build 2400. A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation...
CVE-2018-2341
CVE-2018-2341 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-2207
CVE-2018-2207 entry is rejected/not used; this candidate was in a CNA pool and not assigned to issues.
CVE-2018-2268
CVE-2018-2268 is rejected/not used per the Initial Description.
CVE-2018-2288
CVE-2018-2288 entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-2304
CVE-2018-2304 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-2194
CVE-2018-2194 is rejected/not used and does not represent an active vulnerability entry.
CVE-2018-2208
CVE-2018-2208 is rejected/not used; this ID does not represent an active vulnerability entry.
CVE-2018-2144
CVE-2018-2144 is marked as rejected; this entry does not represent an active vulnerability.
CVE-2018-2101
This CVE entry is rejected and not used; CVE-2018-2101 does not represent an active vulnerability.
CVE-2018-2102
CVE-2018-2102 is rejected and not used, per the Initial Description.
CVE-2018-2171
This CVE entry is rejected and not used; DO NOT rely on CVE-2018-2171 as an active vulnerability record.