CVE-2019-7245

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

Se detectó un problema en la biblioteca GPU-Z.sys en TechPowerUp GPU-Z versiones anteriores a 2.23.0. El controlador vulnerable expone una instrucción wrmsr por medio de una IOCTL y no filtra correctamente el Model Specific Register (MSR). Permitiendo escrituras arbitrarias del MSR puede conllevar a una ejecución de código Ring-0 y a una escalada de privilegios.