| शीर्षक | DVDFab DVDFab Virtual Drive 2.0.0.5 Local Privilege Escapation |
|---|
| विवरण | DVDFab Virtual Drive x.x.x.x ships the signed kernel driver dvdfabio.sys. The driver exposes \\.\DVDFabIO and implements registry proxy IOCTLs that open or create caller-selected native registry paths from kernel context.
The returned registry handle is inserted into the caller's process handle table. Because the driver opens the key from kernel mode without enforcing the caller's normal registry access checks, a standard user can obtain a usable handle to protected HKLM keys. In the validation below, a standard user could not directly write to a protected HKLM test key and could not directly query `HKLM\SAM\SAM`; the same user used \\.\DVDFabIO to write the protected test key and to open/query HKLM\SAM\SAM. |
|---|
| स्रोत | ⚠️ https://winslow1984.com/books/cve-collection/page/dvdfab-virtual-drive-kernel-driver-dvdfabiosys-local-privilege-escalation |
|---|
| उपयोगकर्ता | winslow1984 (UID 79140) |
|---|
| सबमिशन | 20/05/2026 07:07 AM (4 महीनों पहले) |
|---|
| संयम | 14/06/2026 03:45 PM (25 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 370860 [DVDFab Virtual Drive 2.0.0.5 Signed Kernel Driver dvdfabio.sys अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|