2345 security guard Driver Exploitation Vulnerability

2345 security guard Driver Exploitation Vulnerability

2345 a driver of Security Guard has the arbitrary address Write vulnerability that can be Elevation of Privilege.

2345 the IRP_MJ_DEVICE_CONTROL distribution routine of a security guard driver does not verify the caller's Token, nor does it strictly check the input and output parameters, resulting in user-> system) any address write and available kernel vulnerabilities.
 

The login user name is changed to system. See
 

 

Solution:

1. Check whether the caller's Token is Admin;

2. Strictly check input and output parameters.