CVE-2020-12138

CVE-2020-12138 affects the AMD ATI atillk64.sys driver (version 5.11.9.0). The driver allows low-privileged users to map physical memory into their process space via MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages, enabling potential NT AUTHORITY\SYSTEM privilege escal...

PT-2020-13060

Name of the Vulnerable Software and Affected Versions atillk64.sys version 5.11.9.0 Description The issue allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process...

CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM...

Denial Of Service (DoS)

The kernel package is vulnerable to denial of service DoS. The RHSA-2009:0225 update introduced a rewrite attack flaw in the docoredump function. A local attacker able to guess the file name a process is going to dump its core to, prior to the process crashing, could use this flaw to append data ...

"0x00000050" Stop error after you install update 2670838 on a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1

"0x00000050" Stop error after you install update 2670838 on a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1 Introduction This update fixes the following issue in Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1: Assume that you install update 2670838 on a compute...

"0x0000000a" Stop error code when you resume a Windows 7-based computer from sleep or from hibernation

"0x0000000a" Stop error code when you resume a Windows 7-based computer from sleep or from hibernation Not sure if this is the right fix? We've added this issue to our memory dump diagnostic which can confirm. Symptoms Consider the following scenario: You connect a Bluetooth device to a computer...

ZSQL: Content of ROLE SYS PRIVS Database

This script writes the complete database of ROLE SYS PRIVS to KB. Note:This script stores values in KB only and has no output. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-7757

Memory leak in the sassmpgetphyevents function in drivers/scsi/libsas/sasexpander.c in the Linux kernel allows local users to cause a denial of service kernel memory exhaustion via multiple read accesses to files in the /sys/class/sasphy directory...

Moo0 System Monitor Code Execution Vulnerability

Moo0 System Monitor is a suite of computer resource and performance monitoring programs. A security vulnerability exists in the WinRing0x64.sys file in Moo0 System Monitor version 1.83. The vulnerability can be exploited to execute Ring-0 code and elevate privileges with a specially crafted reque...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Unspecified Vulnerability in Rivet Killer Control Center

Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability has been identified in Rivet Killer Control Center, Rivet Killer Control Center prior to 2.1.1352.IOCTL 0x1200...

Unspecified Vulnerability in Rivet Killer Control Center (CNVD-2020-19858)

Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability exists in Rivet Killer Control Center, an issue was discovered in Rivet Killer Control Center prior to...

Unspecified Vulnerability in Rivet Killer Control Center (CNVD-2020-19859)

Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. Rivet Killer Control Center has a security vulnerability that was discovered in Rivet Killer Control Center prior to 2.1.1352.IOCTL...

Rivet Killer Control Center Elevation of Privilege Vulnerability

Rivet Killer Control Center is a computer performance optimization and control software. The program mainly supports application checking and setting priorities. A security vulnerability has been identified in Rivet Killer Control Center, Rivet Killer Control Center before 2.1.1352.IOCTL 0x120004...

CVE-2019-15664

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 2 of 2...

CVE-2019-15665

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary write primitive that can lead to code execution or escalation of privileges...

CVE-2019-15662

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an arbitrary read primitive that can be used as part of a chain to escalate privileges...

Out-of-bounds

An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation, leading to an out-of-bounds read that can be used as part of a chain to escalate privileges issue 1 of 2...