Denial of Service Vulnerability in Windows Optimization Master by Wopti
CVE-2018-9053

7.8HIGH

Key Information:

Vendor

Windows Optimization Master Project

Status
Windows Optimization Master
Vendor
CVE Published:
27 March 2018

What is CVE-2018-9053?

The vulnerability in Windows Optimization Master version 7.99.13.604 arises from the driver file WoptiHWDetect.SYS, which fails to properly validate input values from IOCtl command 0xf10026cc. This oversight can be exploited by local users to trigger a Blue Screen of Death (BSOD), leading to unexpected system crashes and potentially affecting overall system stability. It is crucial for users and administrators to apply updates promptly to mitigate this issue.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%2...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.