Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 and earlier, ArcaVir 2009 System Protection 9.4.3203.9 and earlier, and ArcaBit 2009 Home Protection 9.4.3204.9 and earlier, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\ps_drv containing arbitrary kernel addresses, as demonstrated using the (1) 0x2A7B802B and possibly (2) 0x2A7B8004 and (3) 0x2A7B802F IOCTLs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Arcabit ArcaVir杀毒软件IOCTL请求本地权限提升漏洞
Vulnerability Description
ArcaVir是出自波兰的功能强大的反病毒程序。 ArcaVir杀毒软件产品所使用的ps_drv.sys驱动允许用户打开\\Device\\ps_drv设备并以METHOD_NEITHER缓冲模式发布IOCTL。本地用户可以通过向驱动传送内核地址作为参数来覆盖任意地址，执行任意内核态代码。以下是一个有漏洞的IOCTL示例： seg000:00023F3C RootkitMemoryBlock proc near seg000:00023F3C seg000:00023F3C ArcaStruct = dw
CVSS Information
N/A
Vulnerability Type
N/A