NVD

Id
13111  
Name
CVE-2010-1591  
Description
Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through DeviceRSNTGDI.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-04-28  
Modified Date
2010-04-29  
Seq
2010-1591  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72395 13111 CVE-2010-1591 http://www.ntinternals.org/ntiadv0805/ntiadv0805.html  View
72396 13111 CVE-2010-1591 http://www.ntinternals.org/ntiadv0902/ntiadv0902.html  View
72397 13111 CVE-2010-1591 37951  View
72398 13111 CVE-2010-1591 ADV-2010-0218  View
72399 13111 CVE-2010-1591 rising-antivirus-drivers-priv-escalation(55869)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39644 JVNDB-2010-005429 Beijing Rising International Rising Antivirus における権限を取得される脆弱性 Beijing Rising International Rising Antivirus は、0x83003C07 を含む特定の IOCTL への入力を適切に検証しないため、権限を取得される脆弱性が存在します。 CVE-2010-1591 44171 CVE-2010-1591 13111 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005429.html 2010-04-28 2012-12-20 View