CVE-2017-6178

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer dereference.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/97026Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41542/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141526/USBPcap-1.1.0.0-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/97026Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41542/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Mar 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-61808.8Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng (and CVE-2017-61817.5The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remo CVE-2017-61829.8In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo CVE-2017-61837.2In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory CVE-2017-61844.7In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remo CVE-2017-61866.7Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 CVE-2017-61879.8Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI i CVE-2017-61885.5Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET parameters allows ov CVE-2017-61897.3Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacki CVE-2017-61907.5Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to CVE-2017-61917.8Buffer overflow in APNGDis 2.8 and below allows a remote attacker to execute arbitrary code via a crafted filename.CVE-2017-61925.5Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a cr