CVE-2018-10828

{"id": "CVE-2018-10828", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2018-05-09T18:29:00.327", "references": [{"url": "http://support.lenovo.com/us/en/solutions/LEN-25654", "source": "cve@mitre.org"}, {"url": "https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.c", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/44610/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the \"ApMsgFwd File Mapping Object\" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices."}, {"lang": "es", "value": "Se ha descubierto un problema en Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe permite que el usuario actual mapee y escriba en la secci\u00f3n \"ApMsgFwd File Mapping Object\". ApMsgFwd.exe emplea los datos escritos en esta secci\u00f3n como argumentos a funciones. Esto provoca una condici\u00f3n de denegaci\u00f3n de servicio (DoS) cuando se escriben punteros inv\u00e1lidos en la secci\u00f3n mapeada. Este controlador se ha empleado en dispositivos Dell, ThinkPad y VAIO"}], "lastModified": "2019-06-25T18:15:09.003", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alps:pointing-device_driver:10.1.101.207:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D521D2E-CDF6-4791-A94D-C5CD07AFE45E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}