CVE

Id
36117  
CVE No.
CVE-2008-6000  
Status
Candidate  
Description
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.  
Phase
Assigned (20090128)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
396142 36117 CVE-2008-6000 MISC:http://trapkit.de/advisories/TKADV2008-008.txt  View
396143 36117 CVE-2008-6000 BID:31246  View
396144 36117 CVE-2008-6000 URL:http://www.securityfocus.com/bid/31246  View
396145 36117 CVE-2008-6000 VUPEN:ADV-2008-2636  View
396146 36117 CVE-2008-6000 URL:http://www.vupen.com/english/advisories/2008/2636  View
396147 36117 CVE-2008-6000 SECUNIA:31941  View
396148 36117 CVE-2008-6000 URL:http://secunia.com/advisories/31941  View
396149 36117 CVE-2008-6000 XF:gdata-gdtdiicpt-privilege-escalation(45249)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41783 JVNDB-2009-002790 AJ Auction Pro Platinum の search.php におけるクロスサイトスクリプティングの脆弱性 AJ Auction Pro Platinum の search.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-6004 36117 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002790.html  View