CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: an exploitable pool corruption vulnerability exists in the 0x8200e804 ioctl handler functionality of wibu-systems wibukey.sys version 6.40 (build 2400). a specially crafted irp request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. an attacker can send an irp request to trigger this vulnerability.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-02-05
Last Modified Date: 2019-05-14