A vulnerability was found in DriverGenius 9.70.0.346. It has been declared as critical. Affected by this vulnerability is the function 0x9C402088 in the library mydrivers64.sys of the component IOCTL Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-224233 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.224233 | Permissions Required Third Party Advisory |
| https://vuldb.com/?id.224233 | Third Party Advisory |
| https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view | Exploit |
| https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676 | Third Party Advisory |
Configurations
History
05 Apr 2023, 01:28
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Drivergenius
Drivergenius drivergenius |
|
| CPE | cpe:2.3:a:drivergenius:drivergenius:9.70.0.346:*:*:*:*:*:*:* | |
| CWE | CWE-119 | |
| References | (MISC) https://vuldb.com/?ctiid.224233 - Permissions Required, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.224233 - Third Party Advisory | |
| References | (MISC) https://drive.google.com/file/d/1kYCec3kYCzD9s2Vnclp_aW5jLneWqHC_/view - Exploit | |
| References | (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1676 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
Information
Published : 2023-03-28 21:15
Updated : 2024-05-17 02:18
NVD link : CVE-2023-1676
Mitre link : CVE-2023-1676
JSON object : View
Products Affected
drivergenius
- drivergenius
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer