Security Advisory

CVE-2018-3970

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-25 18:00:00

Last updated 2024-09-17 00:50:30

Assigner talos

CVSS score 4.0

State PUBLISHED

Description

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

← Browse all CVEs View on cve.org ↗