CVE-2019-7240

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

Se detectó un problema en la biblioteca WinRing0x64.sys en Moo0 System Monitor versión 1.83. El controlador vulnerable expone una instrucción wrmsr por medio de una IOCTL 0x9C402088 y no filtra correctamente el Model Specific Register (MSR). Permitiendo escrituras arbitrarias del MSR puede conllevar a una ejecución de código Ring-0 y a una escalada de privilegios.