CVE-2018-18537

Impact

The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.

Affected products

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2018/Dec/34
• http://www.securityfocus.com/bid/106250
• https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities
• http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2018/Dec/34
• http://www.securityfocus.com/bid/106250
• https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities