CVE-2018-15499 GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available rig...
MediumCVSS 4.7
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GEAR Software products that include GEARAspiWDM.sys, 2.2.5.0, allow local users to cause a denial of service (Race Condition and BSoD on Windows) by not checking that user-mode memory is available right before writing to it. A check is only performed at the beginning of a long subroutine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gearsoftware gearaspiwdm | = 2.2.5.0 | No fix listed |
References
- downwithup.github.io exploit third-party-advisory
- github.com exploit third-party-advisory