CVE-2002-2126 in Integrity Protection Driver

Resumen

por MITRE

restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2005-11-16
• Divulgación: 2002-12-31
• Moderación: aceptado
• Artículo: VDB-19768
• CPE: listo
• CWE: CWE-269 (confirmado)
• CVSS: 4.0 (VulDB)
• EPSS: 0.00435
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Hostingprovider, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2126
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2126
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2126/