Description (CNA)
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Paragon Software / Migrate OS to SSD | affected 4 through 5 |
| Paragon Software / Disk Wiper | affected 15 through 16 |
| Paragon Software / Drive Copy | affected 15 through 16 |
| Paragon Software / Backup and Recovery | affected 15 through 17.39 |
| Paragon Software / Hard Disk Manager | affected 15 through 17.39 |
| Paragon Software / Partition Manager | affected 15 through 17.39 |
CWE
No CWE identifiers supplied.
References
- https://paragon-software.zendesk.com/hc/en-us/articles/32993902732817-IMPORTANT-Paragon-Driver-Security-Patch-for-All-Products-of-Hard-Disk-Manager-Product-Line-Biontdrv-sys
- https://www.kb.cert.org/vuls/id/726882
- https://www.paragon-software.com/support/#patches
ADP enrichment
No English description supplied.
No references supplied.