CVE-2018-10828

An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.

CVSS v3 5.5 MEDIUM
CVSS v2.0 2.1 LOW

5.5^/10

CVSS v3 : MEDIUM

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://support.lenovo.com/us/en/solutions/LEN-25654
https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.c	Third Party Advisory
https://www.exploit-db.com/exploits/44610/	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:alps:pointing-device_driver:10.1.101.207:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-05-09 18:29

Updated : 2024-02-04 19:46

NVD link : CVE-2018-10828

Mitre link : CVE-2018-10828

CVE.ORG link : CVE-2018-10828

JSON object : View

Products Affected

alps

pointing-device_driver

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2018-10828", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2018-05-09T18:29:00.327", "references": [{"url": "http://support.lenovo.com/us/en/solutions/LEN-25654", "source": "cve@mitre.org"}, {"url": "https://github.com/SouhailHammou/Exploits/blob/master/CVE-2018-10828/apmsgfwd_exploit_dos.c", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/44610/", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the \"ApMsgFwd File Mapping Object\" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices."}, {"lang": "es", "value": "Se ha descubierto un problema en Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe permite que el usuario actual mapee y escriba en la secci\u00f3n \"ApMsgFwd File Mapping Object\". ApMsgFwd.exe emplea los datos escritos en esta secci\u00f3n como argumentos a funciones. Esto provoca una condici\u00f3n de denegaci\u00f3n de servicio (DoS) cuando se escriben punteros inv\u00e1lidos en la secci\u00f3n mapeada. Este controlador se ha empleado en dispositivos Dell, ThinkPad y VAIO"}], "lastModified": "2019-06-25T18:15:09.003", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:alps:pointing-device_driver:10.1.101.207:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D521D2E-CDF6-4791-A94D-C5CD07AFE45E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}