Vulnerability CVE-2017-6007
Published: 2017-09-13

Description:
A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to crash the OS via a malformed IOCTL call.

CVSS2 => (AV:L/AC:L/Au:N/C:N/I:N/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4.9/10
6.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Complete
Affected software
Sophos -> Hitmanpro 

 References:
https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/
https://www.nuitduhack.com/fr/planning/talk_10
Copyright 2024, cxsecurity.com

 

Back to Top