Lucene search

[email protected]CVE-2018-7250

HistoryFeb 26, 2018 - 8:29 p.m.

CVE-2018-7250

2018-02-2620:29:00

CWE-200

[email protected]

web.nvd.nist.gov

cve-2018-7250

secdrv.sys

microsoft windows

kernel data leak

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. An uninitialized kernel pool allocation in IOCTL 0xCA002813 allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data.

Affected configurations

NVD

Node

microsoftwindows_7

microsoftwindows_8

microsoftwindows_8.1

microsoftwindows_vista

Node

tivosafediscMatch-

CPENameOperatorVersion
microsoft:windows_7microsoft windows 7eq*
microsoft:windows_8microsoft windows 8eq*
microsoft:windows_8.1microsoft windows 8.1eq*
microsoft:windows_vistamicrosoft windows vistaeq*

CPE	Name	Operator	Version
microsoft:windows_7	microsoft windows 7	eq	*
microsoft:windows_8	microsoft windows 8	eq	*
microsoft:windows_8.1	microsoft windows 8.1	eq	*
microsoft:windows_vista	microsoft windows vista	eq	*

References

github.com/Elvin9/SecDrvPoolLeak/blob/master/README.md

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

JSON

Related for CVE-2018-7250

nvd1 prion1 cvelist1 openvas1