CVE

Id
30439  
CVE No.
CVE-2008-0322  
Status
Candidate  
Description
The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\.I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.  
Phase
Assigned (20080116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
323063 30439 CVE-2008-0322 IDEFENSE:20080512 Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability  View
323064 30439 CVE-2008-0322 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699  View
323065 30439 CVE-2008-0322 BID:29171  View
323066 30439 CVE-2008-0322 URL:http://www.securityfocus.com/bid/29171  View
323067 30439 CVE-2008-0322 VUPEN:ADV-2008-1476  View
323068 30439 CVE-2008-0322 URL:http://www.vupen.com/english/advisories/2008/1476/references  View
323069 30439 CVE-2008-0322 SECTRACK:1020006  View
323070 30439 CVE-2008-0322 URL:http://www.securitytracker.com/id?1020006  View
323071 30439 CVE-2008-0322 SECUNIA:30203  View
323072 30439 CVE-2008-0322 URL:http://secunia.com/advisories/30203  View
323073 30439 CVE-2008-0322 XF:win-i2omgmt-code-execution(42358)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47298 JVNDB-2008-002608 FaScript FaPersianHack の class/show.php における SQL インジェクションの脆弱性 FaScript FaPersianHack の class/show.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-0326 30439 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002608.html  View