CVE-2014-2382

The DfDiskLo.sys driver in Faronics Deep Freeze Standard and Enterprise 8.10 and earlier allows local administrators to cause a denial of service (crash) and execute arbitrary code via a crafted IOCTL request that writes to arbitrary memory locations, related to the IofCallDriver function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 32%
VendorProductVersion
faronicsdeep_freeze
𝑥
≤ 8.10
faronicsdeep_freeze
𝑥
≤ 8.10
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/129172/Faronics-Deep-Freeze-Arbitrary-Code-Execution.html
http://seclists.org/fulldisclosure/2014/Nov/52
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2382/
http://packetstormsecurity.com/files/129172/Faronics-Deep-Freeze-Arbitrary-Code-Execution.html
http://seclists.org/fulldisclosure/2014/Nov/52
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2382/