CVE-2018-3990: Buffer Overflow

Published Feb 5, 2019

Updated

An exploitable pool corruption vulnerability exists in the 0x8200E804 IOCTL handler functionality of WIBU-SYSTEMS WibuKey.sys Version 6.40 (Build 2400). A specially crafted IRP request can cause a buffer overflow, resulting in kernel memory corruption and, potentially, privilege escalation. An attacker can send an IRP request to trigger this vulnerability.

Affected Software

2 affected components

Wibu WibuKey=6.40

Microsoft Windows

Event History

Feb 5, 2019

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionSeverity

Frequently Asked Questions

What is CVE-2018-3990?

CVE-2018-3990 is a pool corruption vulnerability in the WIBU-SYSTEMS WibuKey.sys driver that can be exploited to cause kernel memory corruption and potentially escalate privileges.

How severe is CVE-2018-3990?

CVE-2018-3990 is considered critical with a severity score of 7.8.

Which software versions are affected by CVE-2018-3990?

WibuKey.sys Version 6.40 (Build 2400) is affected by CVE-2018-3990.

How can CVE-2018-3990 be exploited?

CVE-2018-3990 can be exploited by sending a specially crafted IRP request to trigger a buffer overflow.

Is Microsoft Windows affected by CVE-2018-3990?

No, Microsoft Windows is not vulnerable to CVE-2018-3990.

What is the Common Weakness Enumeration (CWE) ID for CVE-2018-3990?

The CWE ID for CVE-2018-3990 is CWE-119.