18 matches found
CVE-2025-1865 Local Privilege Escalation in Virtual CloneDrive Kernel Driver
The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM...
CVE-2025-1865
CVE-2025-1865 concerns a local privilege escalation in the Elby Virtual CloneDrive kernel driver. Documents consistently describe a function exposed to low-privileged users that fails to properly validate the privileges of the calling process, enabling creation of files at arbitrary locations wit...
CVE-2025-1865 Local Privilege Escalation in Virtual CloneDrive Kernel Driver
The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM...
VulnCheck KEV: CVE-2009-0824
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...
CloneCD/DVD (ElbyCDIO.sys < 6.0.3.2) Local Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | SlySoft Inc. - http://www.slysoft.com/ | // // | | // // | Affected Software:...
SlySoft Product(s) Code Execution Vulnerability
This host is installed with SlySoft Products and are prone to Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbslysoftprdtscodeexecvuln.nasl 6516 2017-07-04 12:20:47Z cfischer $ SlySoft Products Code Execution Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...
SlySoft Products Detection (Windows SMB Login)
SMB login-based detection of SlySoft products. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SlySoft Products Code Execution Vulnerability (CVE-2009-0824)
Multiple SlySoft Products are prone to a code execution vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CloneCD/DVD (ElbyCDIO.sys < 6.0.3.2) Local Privilege Escalation Exploit
No description provided by source. //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | SlySoft Inc. - http://www.slysoft.com/ | // // | | // // | Affected Software:...
CloneCDDVD ElbyCDIO.sys 6.0.3.2 - Local Privilege Escalation
CloneCDDVD ElbyCDIO.sys 6.0.3.2 - Local Privilege Escalation //////////////////////////////////////////////////////////////////////////////////// // +----------------------------------------------------------------------------+ // // | | // // | SlySoft Inc. - http://www.slysoft.com/ | // // | | ...
CloneCD/DVD (ElbyCDIO.sys < 6.0.3.2) Local Privilege Escalation Exploit
Exploit for unknown platform in category local exploits ======================================================================= CloneCD/DVD ElbyCDIO.sys 6.0.3.2 Local Privilege Escalation Exploit =======================================================================...
[Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service
---------------------------------------------------------------------- PT-2009-11 Positive Technologies Security Advisory SlySoft Multiple Products ElbyCDIO.sys Denial of Service ---------------------------------------------------------------------- --- Affected Software SlySoft AnyDVD version...
CVE-2009-0824
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...
Code injection
Elaborate Bytes ElbyCDIO.sys 6.0.2.0 and earlier, as distributed in SlySoft AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, and CloneCD 5.3.1.3 and earlier, uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer...
CVE-2009-0824
CVE-2009-0824 affects ElbyCDIO.sys and related SlySoft/Elby components (AnyDVD before 6.5.2.6, Virtual CloneDrive 5.4.2.3 and earlier, CloneDVD 2.9.2.0 and earlier, CloneCD 5.3.1.3 and earlier). The issue is a buffer validation problem in IOCTL handling using METHOD_NEITHER, allowing a local atta...
多个SlySoft产品ElbyCDIO.sys驱动本地溢出漏洞
BUGTRAQ ID: 34103 CVECAN ID: CVE-2009-0824 SlySoft是爱尔兰的一家软件公司，产品包括AnyDVD、Virtual CloneDrive、CloneDVD等DVD解密和虚拟光驱工具。 SlySoft多个产品中所使用的ElbyCDIO.sys驱动没有正确地处理IOCTL请求。由于IOCTL处理器使用METHODNEITHER通讯方式且没有正确地验证Irp对象相关的缓冲区，因此本地用户可以提交特制的IOCTL请求触发缓冲区溢出，导致内核崩溃。 SlySoft AnyDVD 6.5.2.2 SlySoft Virtual CloneDrive...
SlySoft (Multiple Products) - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities
SlySoft Multiple Products - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/34103/info Multiple SlySoft products are prone to multiple buffer-overflow vulnerabilities because they fail to adequately validate user-supplied input. A loca...
SlySoft (Multiple Products) - Driver IOCTL Request Multiple Local Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/34103/info Multiple SlySoft products are prone to multiple buffer-overflow vulnerabilities because they fail to adequately validate user-supplied input. A local attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Fail...