In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical information about the machine such as nt!ExpPoolQuotaCookie.
References
Link | Resource |
---|---|
https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/ | Exploit Mitigation Third Party Advisory |
https://www.nuitduhack.com/fr/planning/talk_10 | Third Party Advisory |
https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/ | Exploit Mitigation Third Party Advisory |
https://www.nuitduhack.com/fr/planning/talk_10 | Third Party Advisory |
Configurations
History
21 Nov 2024, 03:31
Type | Values Removed | Values Added |
---|---|---|
References | () https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/ - Exploit, Mitigation, Third Party Advisory | |
References | () https://www.nuitduhack.com/fr/planning/talk_10 - Third Party Advisory |
Information
Published : 2017-09-13 08:29
Updated : 2024-11-21 03:31
NVD link : CVE-2017-7441
Mitre link : CVE-2017-7441
CVE.ORG link : CVE-2017-7441
JSON object : View
Products Affected
sophos
- hitmanpro
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer