« Volver al listado

CVE-2008-6000

Estado: ModificadaAlta (7.2)—

The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Gdata — Antivirus 2008Gdata — Internetsecurity 2008Gdata — Totalcare 2008

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-6000",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2009-01-28T15:30:00.517",
  "references": [
    {
      "url": "http://secunia.com/advisories/31941",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://trapkit.de/advisories/TKADV2008-008.txt",
      "tags": [
        "Exploit"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/31246",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2636",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45249",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/31941",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://trapkit.de/advisories/TKADV2008-008.txt",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/31246",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/2636",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45249",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents."
    },
    {
      "lang": "es",
      "value": "El driver GDTdiIcpt.sys en G DATA AntiVirus 2008, InternetSecurity 2008, y TotalCare 2008 con los registros del kernel con valores de entrada IOCTL 0x8317001c, permite a usuarios locales provocar una denegación de servicio (caída del sistema) u obtener privilegios a través de una petición IOCTL manipulada, como se ha demostrado mediante la ejecución de la función KeSetEvent con contenidos de registros modificados."
    }
  ],
  "lastModified": "2026-06-16T23:01:23.280",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gdata:antivirus_2008:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8185811E-B12E-42A4-8022-A3727A9B071C"
            },
            {
              "criteria": "cpe:2.3:a:gdata:internetsecurity_2008:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CEBD5D4-6E46-4A8C-9D6E-A9A747F0002A"
            },
            {
              "criteria": "cpe:2.3:a:gdata:totalcare_2008:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A76D18BF-6303-4B84-8B83-F59CF10D0B85"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "Per http://trapkit.de/advisories/TKADV2008-008.txt  \r\n\r\nUpgrade to G DATA AntiVirus/InternetSecurity/TotalCare 2009.\r\n  \r\n  http://www.gdata.de/"
}