CVE-2018-19321 PoC — 多款GIGABYTE产品权限许可和访问控制问题漏洞

Source

https://github.com/nanabingies/CVE-2018-19321

Associated Vulnerability

Title:多款GIGABYTE产品权限许可和访问控制问题漏洞 (CVE-2018-19321)
Description:GIGABYTE APP Center等都是中国技嘉科技（GIGABYTE Technology）公司的产品。GIGABYTE APP Center是一款用于管理、更新技嘉产品工具程序的软件。AORUS GRAPHICS ENGINE是一款显卡超频软件。多款GIGABYTE产品中的GPCIDrv和GDrv低级别驱动程序存在安全漏洞。本地攻击者可利用该漏洞提升权限。以下产品和版本受到影响：GIGABYTE APP Center 1.05.21及之前版本；AORUS GRAPHICS ENGINE 1.33

Description

CVE-2018-19321

Readme

# CVE-2018-19321
CVE-2018-19321

# Description
The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges.

File Snapshot


 [4.0K]  /data/pocs/ded6fe3bee1b4ec312f2e96dd2fd76147e17f839
├── [4.4K]  Exploit.cpp
├── [4.2K]  POC.cpp
└── [ 354]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!