CVE-2008-6000 The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial o...
HighCVSS 7.2
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gdata antivirus 2008 | All versions | No fix listed |
| gdata internetsecurity 2008 | All versions | No fix listed |
| gdata totalcare 2008 | All versions | No fix listed |
References
- 31941 third-party-advisory vendor-advisory
- trapkit.de exploit
- 31246 vdb-entry
- ADV-2008-2636 vdb-entry
- gdata-gdtdiicpt-privilege-escalation(45249) vdb-entry