Gửi #92748: Vir.IT eXplorer, VIRAGTLT.sys, DoS

Version: Vir.IT eXplorer x.x.x.x, VIRAGTLT.sys x.x.x.x
https://www.tgsoft.it/

Impact: Denial of Service

Description: From IoControlCode 0x82730088, a normal user can cause DoS due to the lack of validating SystemBuffer.

Reproduce: In the attached file DoS.zip, there are DoS.exe, DoS.cpp, vnlt9486.exe, and VIRAGTLT.sys. DoS.exe is the PoC to cause BSOD where vnlt9486.exe which contains the vulnerable driver VIRAGTLT.sys is installed, and DoS.cpp is the source code of DoS.exe. To reproduce the issue, install vnlt9486.exe and execute DoS.exe. The system is expected to crash (BSOD) once DoS.exe is executed.
https://drive.google.com/file/d/1xqJUMsAWnXx4JmlbT0D0yMBJiMy484QS/view?usp=sharing

• Nguồn: ⚠️ https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned3
• Người dùng: Zeze7w (UID 40823)
• Đệ trình: 21/02/2023 17:07 (cách đây 3 những năm)
• Kiểm duyệt: 13/03/2023 08:49 (20 days later)
• Trạng thái: được chấp nhận
• Mục VulDB: 222875 [TG Soft Vir.IT eXplorer 9.4.86.0 IoControlCode VIRAGTLT.sys 0x82730088 Từ chối dịch vụ]
• điểm: 20