CVE-2014-2884

CVE-2014-2884 concerns TrueCrypt 7.1a. The vulnerability is in the Ntdriver.c function ProcessVolumeDeviceControlIrp, where local users can bypass access restrictions and obtain sensitive information about arbitrary files through two IOCTL calls: TC_IOCTL_OPEN_TEST and TC_IOCTL_GET_SYSTEM_DRIVE_C...

CVE-2014-2885

Concrete details from connected documents show that CVE-2014-2885 affects TrueCrypt 7.1a via two integer-overflow vectors: (1) OriginalLength handling in EncryptedIoQueue.c:MainThreadProc, enabling local information disclosure; (2) large StartingOffset/Length handling in Ntdriver.c:ProcessVolumeD...