Vulnerability in Pedestal Software Integrity Protection Driver
CVE-2002-2127
Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink.
EPSS: 0.003 (27.3th percentile) — read the EPSS interpretation.
Affected products
- Pedestal_software Integrity_protection_driver — versions 1.2
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (mailing-list, Patch, x_refsource_NTBUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)