[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110139

 
 

909

 
 

85964

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2008-3636Date: (C)2008-09-10   (M)2018-02-19


Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 7.2
Exploit Score: Exploit Score: 3.9
Impact Score: Impact Score: 10.0
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: LOCAL
Attack Complexity: Access Complexity: LOW
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: COMPLETE
Scope: Integrity: COMPLETE
Confidentiality: Availability: COMPLETE
Integrity:  
Availability:  
  
Reference:
SECTRACK-1020839
SECTRACK-1020997
SECTRACK-1020998
SECTRACK-1020999
http://www.securityfocus.com/archive/1/archive/1/497131/100/0/threaded
BID-31089
ADV-2008-2526
ADV-2008-2769
ADV-2008-2770
APPLE-SA-2009-09-09
VU#146896
http://securityresponse.symantec.com/avcenter/security/Content/2008.10.07a.html
http://support.apple.com/kb/HT3025
http://www.gearsoftware.com/support/GEARAspi%20Security%20Information.pdf
http://www.symantec.com/avcenter/security/Content/2008.10.07a.html
http://www.wintercore.com/advisories/advisory_W021008.html

CPE    17
cpe:/a:apple:itunes:7.4.2::windows
cpe:/a:apple:itunes:7.6.1::windows
cpe:/a:apple:itunes:7.0.2::windows
cpe:/a:apple:itunes:4.7::windows
...
CWE    1
CWE-189
OVAL    1
oval:org.mitre.oval:def:6035

© SecPod Technologies