Local Privilege Escalation Vulnerability in Jungo WinDriver by Jungo

CVE-2017-14344

What is CVE-2017-14344?

This vulnerability enables local attackers to escalate privileges on affected versions of Jungo WinDriver by exploiting a flaw in the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The vulnerability arises from inadequate validation of user-supplied data, leading to a kernel pool overflow. To exploit this issue, an attacker must have already executed low-privileged code on the system. Successful exploitation can allow the attacker to execute arbitrary code with kernel-level privileges, increasing the risk to the system's integrity.

References