GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
BID:49761
Info
GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
| Bugtraq ID: | 49761 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 26 2011 12:00AM |
| Updated: | Sep 26 2011 12:00AM |
| Credit: | Heurs |
| Vulnerable: |
GMER GMER 1.0.15.15641 |
| Not Vulnerable: | |
Discussion
GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
GMER is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
GMER 1.0.15.15641 is vulnerable; other versions may also be affected.
GMER is prone to a local privilege-escalation vulnerability.
Local attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges and completely compromise the affected computer. Failed exploit attempts will result in a denial-of-service condition.
GMER 1.0.15.15641 is vulnerable; other versions may also be affected.
Exploit / POC
GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
GMER '0x7201c008' IOCTL Call Local Privilege Escalation Vulnerability
References:
References:
- GMER Homepage (GMER)