high7.2Public exploit code
CVE-2015-6923
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privile…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- VBox Satellite Express 2.3.17.3 - Arbitrary Write2015-09-17 · dos · windows
Impact
The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vboxcomm | Satellite Express Protocol | Version 2.3.17.3 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Sep/72
- http://www.securityfocus.com/archive/1/536491/100/0/threaded
- https://www.exploit-db.com/exploits/38225/
- https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt
- http://packetstormsecurity.com/files/133620/VBox-Satellite-Express-Arbitrary-Write-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2015/Sep/72
- http://www.securityfocus.com/archive/1/536491/100/0/threaded
- https://www.exploit-db.com/exploits/38225/
- https://www.korelogic.com/Resources/Advisories/KL-001-2015-005.txt