CVE-2018-3971

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to write data under controlled by an attacker address, resulting in memory corruption. An attacker can send IRP request to trigger this vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-123

Affected software

Vendor	Product	Versions
Talos	Sophos	Sophos HitmanPro.Alert - hmpalert.sys 3.7.6.744 - Windows 7 x86

References

http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636Exploit, Third Party Advisory
http://www.securityfocus.com/bid/105743Broken Link, Third Party Advisory, VDB Entry
https://www.talosintelligence.com/vulnerability_reports/TALOS-2018-0636Exploit, Third Party Advisory

Timeline

Published: Oct 25, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-39729.8An exploitable code execution vulnerability exists in the Levin deserialization functionality of the Epee library, as used in Monero 'Lithiu CVE-2018-39737.8An exploitable out of bounds write exists in the CAL parsing functionality of Canvas Draw version 5.0.0. A specially crafted CAL image proce CVE-2018-39747.8An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker CVE-2018-39757.8An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor 3.2.6 version. A spec CVE-2018-39767.8An exploitable out-of-bounds write exists in the CALS Raster file format-parsing functionality of Canvas Draw version 5.0.0.28. A specially CVE-2018-39778.8An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A specially crafted XCF ima CVE-2018-39787.8An exploitable out-of-bounds write vulnerability exists in the Word Document parser of the Atlantis Word Processor 3.0.2.3, 3.0.2.5. A speci CVE-2018-39796.5A remote denial-of-service vulnerability exists in the way the Nouveau Display Driver (the default Ubuntu Nvidia display driver) handles GPU CVE-2018-39807.8An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. A specially crafted TIFF image pro CVE-2018-39817.8An exploitable out-of-bounds write exists in the TIFF-parsing functionality of Canvas Draw version 5.0.0. An attacker can deliver a TIFF ima CVE-2018-39827.8An exploitable arbitrary write vulnerability exists in the Word document parser of the Atlantis Word Processor 3.0.2.3 and 3.0.2.5. A specia CVE-2018-39837.8An exploitable uninitialized pointer vulnerability exists in the Word document parser of the the Atlantis Word Processor. A specially crafte