CVE-2018-3970

Summary

An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP request to trigger this vulnerability.

Affected Software

VendorProductVersion RangeStatus
TalosSophosSophos Hitmanro.Alert - hmpalert.sys 3.7.6.744affected

Weaknesses

  • memory disclosure

ADP Enrichment

CVE Program Container

Additional References

References