فا

‫ Multiple Panda products Multiple Vulnerability

ID: IRCAD2015073994
Release Date: 2015-07-14
Software:
1.0.0.13 (PSKMAD.sys driver version)
Description:
Panda Kernel Memory Access Driver does not validate the size of data to be copied to both an allocated kernel paged pool buffer and to an allocated non-paged pool buffer. Furthermore, the attacker has control over the start-to-copy index regarding the non-paged pool buffer which allows an attacker to corrupt a kernel object with more precision, and control the EIP via a hijacked function pointer.
Solution
Upgarde to fixed version.
References:

نظرات

بدون نظر
شما برای نظر دادن باید وارد شوید

نوشته

 
تاریخ ایجاد: 30 تیر 1394

امتیاز

امتیاز شما
تعداد امتیازها: 0