CVE-2017-9769

Critical

Published: 02/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Razer Synapse 2.20.15.1104, there is a vulnerability that allows a specially crafted IOCTL to be sent to the rzpnk.sys driver. This can lead to opening a handle to an arbitrary process.

Risk Assessment

An attacker could gain access to system processes, potentially leading to privilege escalation and full control over the system.

Recommendation

It is recommended to update Razer Synapse software to the latest version to mitigate this vulnerability.

Original NVD description (English source)

A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.