Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2010-04-28 23:30
Updated : 2024-02-28 11:41
NVD link : CVE-2010-1591
Mitre link : CVE-2010-1591
CVE.ORG link : CVE-2010-1591
JSON object : View
Products Affected
rising-global
- rising_antivirus
CWE
CWE-20
Improper Input Validation