Tencent QQ Computer Manager 'TSKsp.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Bugtraq ID:	42328
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Aug 09 2010 12:00AM
Updated:	Aug 09 2010 12:00AM
Credit:	Lufeng Li of Neusoft Corporation
Vulnerable:	Tencent QQ Computer Manager 4.0
Not Vulnerable:

Tencent QQ Computer Manager 'TSKsp.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Tencent QQ Computer Manager is prone to a local denial-of-service vulnerability.

Local attackers can exploit this issue to cause denial-of-service conditions.

This issue affects QQ Computer Manager versions 4.0 and prior; other versions may also be affected.

Tencent QQ Computer Manager 'TSKsp.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/42328.py
• /data/vulnerabilities/exploits/42328.py
• /data/vulnerabilities/exploits/42328.py

Tencent QQ Computer Manager 'TSKsp.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Solution:
Reports indicate that this issue has been fixed by the vendor but Symantec has not confirmed it. Please contact the vendor for more information.

Tencent QQ Computer Manager 'TSKsp.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

References:

• Product Page (Tencent)