Privilege Escalation Vulnerability in Jungo WinDriver Software
CVE-2017-14153

7.8HIGH

Key Information:

Vendor

Jungo

Status
Windriver
Vendor
CVE Published:
11 September 2017

What is CVE-2017-14153?

This security vulnerability allows local attackers to escalate their privileges on Jungo WinDriver versions 12.4.0 and earlier. The issue arises during the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver, where user-supplied data is not properly validated. This oversight can lead to a kernel pool overflow, enabling an attacker to execute arbitrary code within the kernel context. To exploit this vulnerability, a local attacker must have already obtained the capability to execute low-privileged code on the target system.

References

https://www.exploit-db.com/exploits/42624/
exploitx_refsource_EXPLOIT-DB
http://packetstormsecurity.com/files/144046/Jungo-DriverW...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-14153 : Privilege Escalation Vulnerability in Jungo WinDriver Software