CWE Code: 362
Vulnerability Type: privilege_escalation
CVSS Score: 4.4
CWE Name:  Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Summary: an exploitable double fetch vulnerability exists in the sboxdrv.sys driver functionality of invincea-x 6.1.3-24058. a specially crafted input buffer and race condition can result in kernel memory corruption, which could result in privilege escalation. an attacker needs to execute a special application locally to trigger this vulnerability.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-04-24
Last Modified Date: 2018-06-13