4 matches found
Design/Logic Flaw
The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...
CVE-2014-2884: Exposure of Sensitive Information to an Unauthorized Actor
The ProcessVolumeDeviceControlIrp function in Ntdriver.c in TrueCrypt 7.1a allows local users to bypass access restrictions and obtain sensitive information about arbitrary files via a 1 TCIOCTLOPENTEST or 2 TCIOCTLGETSYSTEMDRIVECONFIG IOCTL call...
PT-2018-4207
Name of the Vulnerable Software and Affected Versions TrueCrypt version 7.1a Description The issue allows local users to bypass access restrictions and obtain sensitive information about arbitrary files. This is achieved through specific IOCTL calls, including TC IOCTL OPEN TEST or TC IOCTL GET...
PT-2018-4208
Name of the Vulnerable Software and Affected Versions TrueCrypt version 7.1a Description The issue allows local users to obtain sensitive information or cause a denial of service. This is achieved through multiple integer overflows, specifically via vectors involving a crafted item-OriginalLength...