NVD

Id
5731  
Name
CVE-2008-6000  
Description
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-01-28  
Modified Date
2011-03-07  
Seq
2008-6000  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
35242 5731 CVE-2008-6000 http://trapkit.de/advisories/TKADV2008-008.txt  View
35243 5731 CVE-2008-6000 31246  View
35244 5731 CVE-2008-6000 ADV-2008-2636  View
35245 5731 CVE-2008-6000 gdata-gdtdiicpt-privilege-escalation(45249)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41780 JVNDB-2009-002787 GDTdiIcpt.sys ドライバにおけるサービス運用妨害 (DoS) の脆弱性 G DATA AntiVirus、InternetSecurity、および TotalCare の GDTdiIcpt.sys ドライバは、IOCTL 0x8317001c 入力値を伴うカーネルレジスタを設定するため、サービス運用妨害 (システムクラッシュ) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2008-6000 36113 CVE-2008-6000 5731 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002787.html 2009-01-28 2012-06-26 View