[Forgot Password]
Login  Register Subscribe

23631

 
 

120053

 
 

98250

 
 

909

 
 

79281

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2010-1591

Date: (C)2010-04-28   (M)2017-08-18 


Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.

CVSS Score: 7.2Access Vector: LOCAL
Exploit Score: 3.9Access Complexity: LOW
Impact Score: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE





Reference:
BID-37951
SECUNIA-38335
OSVDB-61946
ADV-2010-0218
http://www.ntinternals.org/ntiadv0805/ntiadv0805.html
http://www.ntinternals.org/ntiadv0902/ntiadv0902.html
rising-antivirus-drivers-priv-escalation(55869)

CWE    1
CWE-20

© 2013 SecPod Technologies