CVE-2017-9769
critical
CVSS v3
9.8
CVSS v2
10.0
VIR risk
9.8
Description
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| razer | synapse | 2.20.15.1104 | |
References
- http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess
- https://warroom.securestate.com/cve-2017-9769/
- https://www.exploit-db.com/exploits/42368/
- http://www.rapid7.com/db/modules/exploit/windows/local/razer_zwopenprocess
- https://warroom.securestate.com/cve-2017-9769/
- https://www.exploit-db.com/exploits/42368/
Verify integrity in audit chain (admin only). AS-IS.