Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2018-6947

Description

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.

POC

Reference

- https://www.exploit-db.com/exploits/44167/

- https://www.exploit-db.com/exploits/44168/

Github

No PoCs found on GitHub currently.