CVE-2002-2126 in Integrity Protection Driver

الملخص

بحسب MITRE

restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• حجز: 16/11/2005
• إفشاء: 31/12/2002
• الاعتدال: تمت الموافقة
• إدخال: VDB-19768
• CPE: جاهز
• CWE: CWE-269 (مؤكد)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00435
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Hospital, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2126
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2126
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2126/