CVE-2010-1591

Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:rising-global:rising_antivirus:2008:*:*:*:*:*:*:*
cpe:2.3:a:rising-global:rising_antivirus:2009:*:*:*:*:*:*:*
cpe:2.3:a:rising-global:rising_antivirus:2010:*:*:*:*:*:*:*

History

21 Nov 2024, 01:14

Type Values Removed Values Added
References () http://osvdb.org/61946 - () http://osvdb.org/61946 -
References () http://secunia.com/advisories/38335 - Vendor Advisory () http://secunia.com/advisories/38335 - Vendor Advisory
References () http://www.ntinternals.org/ntiadv0805/ntiadv0805.html - Exploit () http://www.ntinternals.org/ntiadv0805/ntiadv0805.html - Exploit
References () http://www.ntinternals.org/ntiadv0902/ntiadv0902.html - Exploit () http://www.ntinternals.org/ntiadv0902/ntiadv0902.html - Exploit
References () http://www.securityfocus.com/bid/37951 - Exploit () http://www.securityfocus.com/bid/37951 - Exploit
References () http://www.vupen.com/english/advisories/2010/0218 - Vendor Advisory () http://www.vupen.com/english/advisories/2010/0218 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/55869 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/55869 -

Information

Published : 2010-04-28 23:30

Updated : 2024-11-21 01:14


NVD link : CVE-2010-1591

Mitre link : CVE-2010-1591

CVE.ORG link : CVE-2010-1591


JSON object : View

Products Affected

rising-global

  • rising_antivirus
CWE
CWE-20

Improper Input Validation