CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Resource Management Errors
Summary: the gdtdiicpt.sys driver in g data antivirus 2008, internetsecurity 2008, and totalcare 2008 populates kernel registers with ioctl 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted ioctl request, as demonstrated by execution of the kesetevent function with modified register contents. per http://trapkit.de/advisories/tkadv2008-008.txt  

upgrade to g data antivirus/internetsecurity/totalcare 2009.
  
  http://www.gdata.de/
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-01-28
Last Modified Date: 2017-08-08
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Resource Management Errors.
user
CWE Code: 399
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Resource Management Errors
Summary: the gdtdiicpt.sys driver in g data antivirus 2008, internetsecurity 2008, and totalcare 2008 populates kernel registers with ioctl 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted ioctl request, as demonstrated by execution of the kesetevent function with modified register contents. per http://trapkit.de/advisories/tkadv2008-008.txt  

upgrade to g data antivirus/internetsecurity/totalcare 2009.
  
  http://www.gdata.de/
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2009-01-28
Last Modified Date: 2017-08-08
assistant