CVE-2008-7211 CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade...
MediumCVSS 6.9
EPSS 0.78%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| soundblaster ensoniq pci es1371 wdm driver | = 5.1.3612.0 | No fix listed |
References
- www.reversemode.com
- 20080107 [Reversemode Paper] Exploiting WDM Audio Drivers mailing-list
- 27179 exploit vdb-entry