CVE-2017-14075
HighSummary
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. The issue exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver, where user-supplied data is not properly validated.
Risk Assessment
An attacker with low-privileged access can exploit this vulnerability to execute arbitrary code under the context of the kernel, posing a serious threat to system integrity.
Recommendation
It is recommended to update to the latest version of Jungo WinDriver to mitigate this vulnerability and implement appropriate security measures to restrict system access.
Other vulnerabilities in Jungo WinDriver 12.4.0 i wcześniejsze
See all- CVE-2017-14344High
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. The issue exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver, where user-supplied data is not properly validated, potentially leading to a kernel pool overflow.
- CVE-2017-14153High
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. The issue exists within the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver, where user-supplied data is not properly validated, potentially leading to a kernel pool overflow.
Original NVD description (English source)
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x953824a7 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in an out-of-bounds write condition. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.