PT-2023-16936 · Tg Soft · Viragtlt.Sys+1

Khoabda + 5 · Publicado 2023-03-13 · Atualizado 2024-05-17 · CVE-2023-1369

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TG Soft Vir.IT eXplorer version 9.4.86.0

Description A problematic issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler, leading to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Recommendations For version 9.4.86.0, upgrade to version 9.5 to address this issue. As a temporary workaround, consider disabling the 0x82730088 function in the VIRAGTLT.sys library until the upgrade is applied. Restrict access to the IoControlCode Handler component to minimize the risk of exploitation.

Exploit

Correção

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2023-1369

Produtos afetados

Viragtlt.Sys

Vir.It Explorer

Referências · 8

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369 · Exploit
• 🔥 https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1369 · Nota de Segurança
• https://t.me/cvenotify/46396 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1369 · Aviso do Fabricante
• https://vuldb.com/?ctiid.222875 · Nota
• https://vuldb.com/?id.222875 · Nota
• https://tgsoft.it/scripts/getfile.asp?lang=ITA · Correção