CVE-2020-15479
High
Description
An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest through 10. The driver's IOCTL request handler attempts to copy the input buffer onto the stack without checking its size and can cause a buffer overflow. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys.
SeverityHigh
CVSS8.8
Exploit probability—
ProductPassmark Burnintest
PublishedAug 7, 2020
First seenAug 7, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| passmark burnintest | v ≤ 9.1 | — |
| passmark osforensics | v ≤ 7.1 | — |
| passmark performancetest | v ≤ 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.