CVE-2019-9742: High severity g data total security vulnerability
gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FILEDEVICESECUREOPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9742?
CVE-2019-9742 has been classified as a medium severity vulnerability that allows an attacker to bypass access controls.
How do I fix CVE-2019-9742?
To fix CVE-2019-9742, ensure that you upgrade G Data Total Security to a version released after February 22, 2019.
What impact does CVE-2019-9742 have on my system?
CVE-2019-9742 can lead to unintended impersonation or unauthorized access to files and directories managed by the gdwfpcd.sys driver.
Which versions of G Data Total Security are affected by CVE-2019-9742?
All versions of G Data Total Security prior to the release on February 22, 2019, are affected by CVE-2019-9742.
How does CVE-2019-9742 bypass access controls?
CVE-2019-9742 bypasses access controls due to the absence of FILE_DEVICE_SECURE_OPEN in the interpreted device characteristics of gdwfpcd.sys.