CVEvulnerability
CVE-2008-0322
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-05-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-732
Description
The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 for Microsoft Windows XP sets Everyone/Write permissions for the "\\.\I2OExc" device interface, which allows local users to gain privileges. NOTE: this issue can be leveraged to overwrite arbitrary memory and execute code via an IOCTL call with a crafted DeviceObject pointer.
Affected configurations
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-732 Incorrect Permission Assignment for Critical Resource weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699 Broken Link, Patch
- http://secunia.com/advisories/30203 Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29171 Broken Link, Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020006 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1476/references Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42358 Third Party Advisory, VDB Entry
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=699 Broken Link, Patch
- http://secunia.com/advisories/30203 Broken Link, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/29171 Broken Link, Patch, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1020006 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/1476/references Permissions Required
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42358 Third Party Advisory, VDB Entry