CVE-2017-6008 A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate pr...
HighCVSS 7.8
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to escalate privileges via a malformed IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sophos hitmanpro | <= 3.7.20 | No fix listed |
References
- github.com exploit third-party-advisory
- trackwatch.com exploit technical-description third-party-advisory
- trackwatch.com exploit technical-description third-party-advisory
- 43057 exploit
- www.nuitduhack.com third-party-advisory