Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IEEE1394规格 权限绕过泄露漏洞
Vulnerability Description
IEEE1394规格中存在设计错误,可物理访问设备的攻击者使用修改后的FireWire/IEEE 1394客户端,然后绕过通常需要较高物理访问exploit权限的专门限制,便可读写敏感存储区。
CVSS Information
N/A
Vulnerability Type
N/A