CVE-2017-14344

This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the processing of IOCTL 0x95382673 by the windrvr1240 kernel driver. The issue lies in the failure to properly validate user-supplied data which can result in a kernel pool overflow. An attacker can leverage this vulnerability to execute arbitrary code under the context of kernel.

• CWE-20

• http://srcincite.io/advisories/src-2017-0027/Third Party Advisory
• https://www.exploit-db.com/exploits/42665/Exploit, Third Party Advisory, VDB Entry
• http://srcincite.io/advisories/src-2017-0027/Third Party Advisory
• https://www.exploit-db.com/exploits/42665/Exploit, Third Party Advisory, VDB Entry

Published

Sep 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14339The DNS packet parser in YADIFA before 2.2.6 does not check …
• CVE-2017-1434IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Conne…
• CVE-2017-14340The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the…
• CVE-2017-14341ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWP…6.5
• CVE-2017-14342ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in…
• CVE-2017-14343ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadX…
• CVE-2017-14345SQL Injection exists in tianchoy/blog through 2017-09-12 via…
• CVE-2017-14346upload.php in tianchoy/blog through 2017-09-12 allows unrest…
• CVE-2017-14347NexusPHP 1.5.beta5.20120707 has XSS in the returnto paramete…
• CVE-2017-14348LibRaw before 0.18.4 has a heap-based Buffer Overflow in the…
• CVE-2017-14349An authentication vulnerability in HPE SiteScope product ver…
• CVE-2017-14350A potential security vulnerability has been identified in HP…