PT-2008-1998 · Unknown · Core Force

Sebastian Gottschalk

·

Publicado

2008-01-18

·

Atualizado

2018-10-15

·

CVE-2008-0365

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CORE FORCE versions prior to 0.95.172
Description The issue is related to multiple buffer overflows that can be triggered by local users through crafted arguments to certain functions. This can lead to a denial of service, causing the system to crash, and potentially allow the execution of arbitrary code in the kernel context. The buffer overflows can occur in (1) IOCTL functions within the Firewall module or (2) SSDT hook handler functions in the Registry module.
Recommendations For versions prior to 0.95.172, update to version 0.95.172 or later to resolve the issue. As a temporary workaround, consider restricting access to the Firewall and Registry modules to minimize the risk of exploitation. Avoid using crafted arguments to IOCTL functions in the Firewall module or SSDT hook handler functions in the Registry module until the issue is resolved.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0365

Produtos afetados

Core Force