critical9.8Public exploit code
CVE-2017-9769
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)2017-07-24 · local · windows_x86-64 · Verified
Impact
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Razer | Synapse | Version 2.20.15.1104 |
References
- NVD record
- CVE.org record
- http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess
- https://warroom.securestate.com/cve-2017-9769/
- https://www.exploit-db.com/exploits/42368/
- http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess
- https://warroom.securestate.com/cve-2017-9769/
- https://www.exploit-db.com/exploits/42368/