Lucene search

TalosCVE-2018-3971

HistoryOct 25, 2018 - 6:29 p.m.

CVE-2018-3971

2018-10-2518:29:00

CWE-123

talos

web.nvd.nist.gov

sophos

hitmanpro.alert

arbitrary write vulnerability

memory corruption

cve-2018-3971

nvd

irp request

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.0%

JSON

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.

Affected configurations

Nvd

Vulners

Node

sophoshitmanpro.alertMatch3.7.6.744

VendorProductVersionCPE
sophoshitmanpro.alert3.7.6.744cpe:2.3:a:sophos:hitmanpro.alert:3.7.6.744:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sophos	hitmanpro.alert	3.7.6.744	cpe:2.3:a:sophos:hitmanpro.alert:3.7.6.744:::::::*

CNA Affected

[
  {
    "product": "Sophos",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Sophos HitmanPro.Alert - hmpalert.sys 3.7.6.744 - Windows 7 x86"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105743

www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

18.0%

JSON

Related for CVE-2018-3971