CVE-2018-9136

MEDIUM

Jungo Windriver < 12.7.0 - Improper Input Validation

Title source: rule

Description

windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a crafted .exe file, a different vulnerability than CVE-2018-8821.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/bigric3/poc2

View Exploit ZIP pw:eip

Scores

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 35.0%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-20

Status published

Products (1)

jungo/windriver < 12.7.0

Published Mar 30, 2018

Tracked Since Feb 18, 2026