CVE-2019-1010208

2019-07-2313:12:38

dwf

www.cve.org

AI Score

3.5

Confidence

High

EPSS

Percentile

12.6%

JSON

IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver (veracrypt.sys). The attack vector is: Locally executed code, IOCTL request to driver. The fixed version is: 1.23-Hotfix-1.

CNA Affected

[
  {
    "product": "Veracrypt, Truecrypt",
    "vendor": "IDRIX, Truecrypt",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) [fixed: 1.23-Hotfix-1]"
      }
    ]
  }
]