CWE-782 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-782/ Sun, 26 Feb 2023 09:10:13 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-782 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-782/ 32 32 CVE-2008-3831 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3831/ Sun, 26 Feb 2023 09:10:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3831/ The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER […]

The post CVE-2008-3831 appeared first on CVE Vulnerability.

]]> The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manager (DRM) master, which allows local users to cause a denial of service (memory corruption) via a crafted ioctl call, related to absence of the DRM_MASTER and DRM_ROOT_ONLY flags in the ioctl’s configuration.

The post CVE-2008-3831 appeared first on CVE Vulnerability.

]]> CVE-2008-3525 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3525/ Sun, 26 Feb 2023 09:10:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3525/ The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.

The post CVE-2008-3525 appeared first on CVE Vulnerability.

]]> The sbni_ioctl function in drivers/net/wan/sbni.c in the wan subsystem in the Linux kernel 2.6.26.3 does not check for the CAP_NET_ADMIN capability before processing a (1) SIOCDEVRESINSTATS, (2) SIOCDEVSHWSTATE, (3) SIOCDEVENSLAVE, or (4) SIOCDEVEMANSIPATE ioctl request, which allows local users to bypass intended capability restrictions.

The post CVE-2008-3525 appeared first on CVE Vulnerability.

]]> CVE-2008-0322 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0322/ Sun, 26 Feb 2023 09:08:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0322/ The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the “\.I2OExc” device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.

The post CVE-2008-0322 appeared first on CVE Vulnerability.

]]> The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the “\.I2OExc” device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.

The post CVE-2008-0322 appeared first on CVE Vulnerability.

]]> CVE-2007-4277 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4277/ Sun, 26 Feb 2023 09:07:08 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4277/ The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \.Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality. NOTE: this can be leveraged for privilege escalation by exploiting […]

The post CVE-2007-4277 appeared first on CVE Vulnerability.

]]> The Trend Micro AntiVirus scan engine before 8.550-1001, as used in Trend Micro PC-Cillin Internet Security 2007, and Tmxpflt.sys 8.320.1004 and 8.500.0.1002, has weak permissions (Everyone:Write) for the \.Tmfilter device, which allows local users to send arbitrary content to the device via the IOCTL functionality. NOTE: this can be leveraged for privilege escalation by exploiting a buffer overflow in the handler for IOCTL 0xa0284403.

The post CVE-2007-4277 appeared first on CVE Vulnerability.

]]> CVE-2007-1400 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1400/ Sun, 26 Feb 2023 09:05:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1400/ Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.

The post CVE-2007-1400 appeared first on CVE Vulnerability.

]]> Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute arbitrary commands by sending characters to a shell process on the same termimal via the TIOCSTI ioctl.

The post CVE-2007-1400 appeared first on CVE Vulnerability.

]]>