DAEMON Tools 'ioctl 'handles Local Privilege Escalation Vulnerability

Release date: 2012-03-12
Updated on: 2012-03-13

Affected Systems:
DAEMON Tools Lite 4.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52417

DAEMON Tools is an optical media simulation software.

DAEMON Tools has an index error when processing 0x00222850 IOCTL in dtsoftbus01.sys. It can be used to write the DWORD value to any kernel memory.

<* Source: ADLab

Link: http://secunia.com/advisories/46809/

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

DAEMON Tools
------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.daemon-tools.cc/