Kernel Data Leak Vulnerability in Sophos SurfRight HitmanPro Product
CVE-2017-7441

7.8HIGH

Key Information:

Vendor
Sophos
Status
Hitmanpro
Vendor
CVE Published:
13 September 2017

Summary

A vulnerability exists in Sophos SurfRight HitmanPro prior to version 3.7.20 Build 286 that allows an attacker to perform crafted IOCTL operations. This could result in the unauthorized disclosure of sensitive kernel data, including critical information like the nt!ExpPoolQuotaCookie. As this vulnerability operates at the driver level, it poses significant risks to user security and exposes crucial machine details to potential exploitation.

References

https://www.nuitduhack.com/fr/planning/talk_10
x_refsource_MISC
https://trackwatch.com/kernel-pool-overflow-exploitation-...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.