PT-2023-16936 · Tg Soft · Viragtlt.Sys+1

Khoabda + 5 · Published 2023-03-13 · Updated 2024-05-17 · CVE-2023-1369

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TG Soft Vir.IT eXplorer version 9.4.86.0

Description A problematic issue affects the function 0x82730088 in the library VIRAGTLT.sys of the component IoControlCode Handler, leading to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Recommendations For version 9.4.86.0, upgrade to version 9.5 to address this issue. As a temporary workaround, consider disabling the 0x82730088 function in the VIRAGTLT.sys library until the upgrade is applied. Restrict access to the IoControlCode Handler component to minimize the risk of exploitation.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2023-1369

Affected Products

Viragtlt.Sys

Vir.It Explorer

References · 8

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1369 · Exploit
• 🔥 https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1369 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1369 · Vendor Advisory
• https://tgsoft.it/scripts/getfile.asp?lang=ITA · Patch
• https://t.me/cvenotify/46396 · Telegram Post
• https://vuldb.com/?ctiid.222875 · Note
• https://vuldb.com/?id.222875 · Note