CVE-2015-1515 – SoftSphere DefenseWall FW/IPS 3.24 - Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2015-1515

The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call. El controlador dwall.sys en SoftSphere DefenseWall Personal Firewall 3.24 permite a usuarios locales escribir datos a localizaciones de memoria arbitrarias, y como consecuencia ganar privilegios, a través de una llamada IOCTL 0x00222000, 0x00222004, 0x00222008, 0x0022200c, o 0x00222010 manipulada. • https://www.exploit-db.com/exploits/36052 http://www.exploit-db.com/exploits/36052 http://www.osvdb.org/117996 • CWE-264: Permissions, Privileges, and Access Controls •