SB20240910126 - Multiple vulnerabilities in Microsoft Kernel Streaming Service Driver
Published: September 10, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Input validation error (CVE-ID: CVE-2024-38241)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of user-supplied input in Kernel Streaming Service Driver. A local user can pass specially crafted input to the application and gain elevated privileges on the target system.
2) Input validation error (CVE-ID: CVE-2024-38245)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of user-supplied input in Kernel Streaming Service Driver. A local user can pass specially crafted input to the application and gain elevated privileges on the target system.
3) Heap-based buffer overflow (CVE-ID: CVE-2024-38238)
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Kernel Streaming Service Driver. A local user can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system with elevated privileges.
4) Input validation error (CVE-ID: CVE-2024-38243)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of user-supplied input in Kernel Streaming Service Driver. A local user can pass specially crafted input to the application and gain elevated privileges on the target system.
5) Input validation error (CVE-ID: CVE-2024-38244)
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of user-supplied input in Kernel Streaming Service Driver. A local user can pass specially crafted input to the application and gain elevated privileges on the target system.
6) Heap-based buffer overflow (CVE-ID: CVE-2024-38242)
The vulnerability allows a local user to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Kernel Streaming Service Driver. A local user can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system with elevated privileges.
Remediation
Install update from vendor's website.
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38241
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38245
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38238
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38243
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38244
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38242