CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: local attackers can trigger a stack-based buffer overflow on vulnerable installations of antiy-avl atool security management v1.0.0.22. an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. the specific flaw exists within the processing of ioctl 0x80002000 by the irpfile.sys antiy-avl atool kernel driver. the bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. an attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-05
Last Modified Date: 2019-01-04
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Restriction of Operations within the Bounds of a Memory Buffer.
user
CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: local attackers can trigger a stack-based buffer overflow on vulnerable installations of antiy-avl atool security management v1.0.0.22. an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. the specific flaw exists within the processing of ioctl 0x80002000 by the irpfile.sys antiy-avl atool kernel driver. the bug is caused by failure to properly validate the length of the user-supplied data, which results in a kernel stack buffer overflow. an attacker can leverage this vulnerability to execute arbitrary code in the context of the kernel, which could lead to privilege escalation and a failed exploit could lead to denial of service.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-05
Last Modified Date: 2019-01-04
assistant