PT-2009-2678 · Creativelabs+1 · Es1371Mp.Sys+2

Published 2009-09-11 · Updated 2018-10-11 · CVE-2008-7211

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CreativeLabs es1371mp.sys version 5.1.3612.0

Description The issue allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer, due to the lack of a Functional Device Object (FDO) to prevent user-mode access to the Physical Device Object (PDO). This occurs when the CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver is used in Ensoniq PCI 1371 sound cards and runs on Windows Vista.

Recommendations For CreativeLabs es1371mp.sys version 5.1.3612.0, consider restricting access to the Physical Device Object (PDO) to minimize the risk of exploitation, until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2008-7211

Affected Products

Ensoniq Pci 1371

Windows Vista

Es1371Mp.Sys

References · 5

• 🔥 http://securityfocus.com/bid/27179 · Exploit
• 🔥 https://exploit-db.com/exploits/30999 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7211 · Security Note
• http://securityfocus.com/archive/1/485848/100/200/threaded · Note
• http://reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=54 · Note