Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
BID:35100
Info
Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
| Bugtraq ID: | 35100 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 26 2009 12:00AM |
| Updated: | May 26 2009 08:30PM |
| Credit: | alex ntinternals org |
| Vulnerable: |
ArcaBit ArcaVir 2009 System Protection 0 ArcaBit ArcaVir 2009 Internet Security 0 ArcaBit ArcaVir 2009 Home Protection 0 ArcaBit ArcaVir 2009 Antivirus Protection 0 |
| Not Vulnerable: |
ArcaBit ArcaVir 2009 System Protection 9.4.3203 9 ArcaBit ArcaVir 2009 Internet Security 9.4.3202 9 ArcaBit ArcaVir 2009 Home Protection 9.4.3204 9 ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201 9 |
Discussion
Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
Multiple ArcaBit ArcaVir products are prone to multiple local privilege-escalation vulnerabilities that affect the 'ps_drv.sys' driver.
An attacker can exploit these issues to execute arbitrary code with elevated privileges, facilitating a complete compromise of the affected computer.
The following applications are vulnerable:
ArcaVir 2009 Antivirus Protection
ArcaVir 2009 Internet Security
ArcaVir 2009 System Protection
ArcaVir 2009 Home Protection
Multiple ArcaBit ArcaVir products are prone to multiple local privilege-escalation vulnerabilities that affect the 'ps_drv.sys' driver.
An attacker can exploit these issues to execute arbitrary code with elevated privileges, facilitating a complete compromise of the affected computer.
The following applications are vulnerable:
ArcaVir 2009 Antivirus Protection
ArcaVir 2009 Internet Security
ArcaVir 2009 System Protection
ArcaVir 2009 Home Protection
Exploit / POC
Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
Solution:
Reports indicate that the vendor has released fixes to address these issues; Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reports indicate that the vendor has released fixes to address these issues; Symantec has not confirmed this. Please contact the vendor for more information.
References
Multiple ArcaBit ArcaVir Products Multiple IOCTL Request Local Privilege Escalation Vulnerabilities
References:
References:
- ArcaVir (ps_drv.sys) Multiple Privilege Escalation Vulnerabilities (NT Internals)
- Vendor Homepage (ArcaBit)