WinMount 'WMDrive.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Bugtraq ID:	51034
Class:	Input Validation Error
CVE:	CVE-2011-5032
Remote:	No
Local:	Yes
Published:	Dec 13 2011 12:00AM
Updated:	Jan 03 2012 11:30PM
Credit:	ADLab, VenusTech through Secunia.
Vulnerable:	WinMount WinMount 3.5.1018
Not Vulnerable:

WinMount 'WMDrive.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

WinMount is prone to a local denial-of-service vulnerability.

A local attacker can exploit this issue to cause a system crash, resulting in a denial-of-service condition.

WinMount 3.5.1018 is affected; other versions may also be affected.

WinMount 'WMDrive.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WinMount 'WMDrive.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

WinMount 'WMDrive.sys' Driver IOCTL Handling Local Denial of Service Vulnerability

References:

• WinMount - Homepage (WinMount)