Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:14
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/61946 - | |
References | () http://secunia.com/advisories/38335 - Vendor Advisory | |
References | () http://www.ntinternals.org/ntiadv0805/ntiadv0805.html - Exploit | |
References | () http://www.ntinternals.org/ntiadv0902/ntiadv0902.html - Exploit | |
References | () http://www.securityfocus.com/bid/37951 - Exploit | |
References | () http://www.vupen.com/english/advisories/2010/0218 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/55869 - |
Information
Published : 2010-04-28 23:30
Updated : 2024-11-21 01:14
NVD link : CVE-2010-1591
Mitre link : CVE-2010-1591
CVE.ORG link : CVE-2010-1591
JSON object : View
Products Affected
rising-global
- rising_antivirus
CWE
CWE-20
Improper Input Validation