CoreCVE
Back

HIGH

In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow

Published Mar 12, 2019

Description

In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (2)

CWE-129

CWE-787

Out-of-bounds Write

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 12, 2019
Updated Aug 4, 2024
Reserved Mar 12, 2019
Link CVE-2019-9729
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-9729
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-9729