PT-2020-20185 · Norman · Norman Malware Cleaner

Published 2020-02-03 · Updated 2020-02-06 · CVE-2020-8508

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norman Malware Cleaner version 2.08.08

Description The issue arises from the mishandling of function pointers passed between user and kernel mode in the nsak64.sys driver, allowing users to call arbitrary kernel functions.

Recommendations For Norman Malware Cleaner version 2.08.08, consider disabling the nsak64.sys driver until a patch is available to prevent the potential for arbitrary kernel function calls.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-8508

Affected Products

Norman Malware Cleaner

References · 3

• 🔥 https://downwithup.github.io/CVEPosts.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8508 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8508 · Vendor Advisory