CVE-2020-15479: Buffer Overflow
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-15479?
CVE-2020-15479 is a vulnerability discovered in PassMark BurnInTest, OSForensics, and PerformanceTest that can lead to arbitrary Ring-0 code execution.
How does CVE-2020-15479 impact PassMark BurnInTest?
CVE-2020-15479 can cause a buffer overflow in PassMark BurnInTest, potentially allowing arbitrary Ring-0 code execution.
What is the severity of CVE-2020-15479?
CVE-2020-15479 has a severity rating of 8.8 (high).
How do I fix CVE-2020-15479 in PassMark BurnInTest?
To fix CVE-2020-15479 in PassMark BurnInTest, it is recommended to update to version 9.2 or later.
Are there any references available for CVE-2020-15479?
Yes, you can find references for CVE-2020-15479 at the following links: [Vulnerability Disclosure](https://github.com/eset/vulnerability-disclosures) and [PassMark Forum](https://www.passmark.com/forum/index.php).