CVE-2014-2382 The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL...
HighCVSS 7.2
EPSS 0.62%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| faronics deep freeze | <= 8.10 | No fix listed |
References
- packetstormsecurity.com exploit
- 20141119 CVE-2014-2382 - Arbitrary Code Execution In Faronics Deep Freeze Standard and Enterprise exploit mailing-list
- www.portcullis-security.com exploit