Race Condition in Microsoft Windows Operating Systems and Macrovision SafeDisc
CVE-2018-7249

7HIGH

Key Information:

Vendor

Microsoft
Status
Windows Vista
Windows 8.1
Windows 7
Windows 8
Vendor
CVE Published:
26 February 2018

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-7249?

A vulnerability exists in secdrv.sys that affects multiple versions of Microsoft Windows and Macrovision SafeDisc. This issue allows an unprivileged attacker to exploit a race condition through carefully crafted IOCTL calls, leading to a use-after-free scenario. By leveraging this flaw, attackers can execute arbitrary code within the kernel, potentially compromising system integrity and security.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

NotSecDrv
Created by Elvin9

References

https://github.com/Elvin9/NotSecDrv/blob/master/README.md
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.