Privilege Escalation Vulnerability in Jungo WinDriver Software

CVE-2017-14153

What is CVE-2017-14153?

This security vulnerability allows local attackers to escalate their privileges on Jungo WinDriver versions 12.4.0 and earlier. The issue arises during the processing of IOCTL 0x953824b7 by the windrvr1240 kernel driver, where user-supplied data is not properly validated. This oversight can lead to a kernel pool overflow, enabling an attacker to execute arbitrary code within the kernel context. To exploit this vulnerability, a local attacker must have already obtained the capability to execute low-privileged code on the target system.

References