CVE-2010-1591

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/61946
http://secunia.com/advisories/38335Vendor Advisory
http://www.ntinternals.org/ntiadv0805/ntiadv0805.htmlExploit
http://www.ntinternals.org/ntiadv0902/ntiadv0902.htmlExploit
http://www.securityfocus.com/bid/37951Exploit
http://www.vupen.com/english/advisories/2010/0218Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55869
http://osvdb.org/61946
http://secunia.com/advisories/38335Vendor Advisory
http://www.ntinternals.org/ntiadv0805/ntiadv0805.htmlExploit
http://www.ntinternals.org/ntiadv0902/ntiadv0902.htmlExploit
http://www.securityfocus.com/bid/37951Exploit
http://www.vupen.com/english/advisories/2010/0218Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/55869

Timeline

Published: Apr 28, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-15926.9sandra.sys 15.18.1.1 and earlier in the Sandra Device Driver in SiSoftware Sandra 16.10.2010.1 and earlier allows local users to gain privil CVE-2010-15934.3Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HT CVE-2010-15944.3Multiple cross-site scripting (XSS) vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to inject arbi CVE-2010-15957.5Multiple SQL injection vulnerabilities in ocsreports/index.php in OCS Inventory NG 1.02.1 allow remote attackers to execute arbitrary SQL co CVE-2010-15966.8Support Incident Tracker before 3.51, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication CVE-2010-15979.3Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP CVE-2010-15986.8phpThumb.php in phpThumb() 1.7.9 and possibly other versions, when ImageMagick is installed, allows remote attackers to execute arbitrary co CVE-2010-15997.5SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the CVE-2010-16007.5SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attackers to execute arbitra CVE-2010-16015.0Directory traversal vulnerability in the JA Comment (com_jacomment) component for Joomla! allows remote attackers to read arbitrary files vi CVE-2010-16027.5Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrar CVE-2010-16037.5Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! a