Alps Pointing-device Driver における入力確認に関する脆弱性
| Title |
Alps Pointing-device Driver における入力確認に関する脆弱性
|
| Summary |
Alps Pointing-device Driver には、入力確認に関する脆弱性が存在します。
|
| Possible impacts |
サービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution |
ベンダ情報および参考情報を参照して適切な対策を実施してください。 |
| Publication Date |
May 9, 2018, midnight |
| Registration Date |
July 5, 2018, 6:06 p.m. |
| Last Update |
July 5, 2018, 6:06 p.m. |
|
CVSS3.0 : 警告
|
| Score |
5.5
|
| Vector |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
CVSS2.0 : 注意
|
| Score |
2.1
|
| Vector |
AV:L/AC:L/Au:N/C:N/I:N/A:P |
Affected System
| アルプス電気株式会社 |
|
Alps Pointing-device Driver 10.1.101.207
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
その他
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2018年07月05日]
掲載 |
July 5, 2018, 6:06 p.m. |
NVD Vulnerability Information
CVE-2018-10828
| Summary |
An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data written to this section as arguments to functions. This causes a denial of service condition when invalid pointers are written to the mapped section. This driver has been used with Dell, ThinkPad, and VAIO devices.
|
| Publication Date |
May 10, 2018, 3:29 a.m. |
| Registration Date |
March 1, 2021, 6:43 p.m. |
| Last Update |
Nov. 21, 2024, 12:42 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:alps:pointing-device_driver:10.1.101.207:*:*:*:*:*:*:* |
|
|
|
|
Related information, measures and tools
Common Vulnerabilities List