CVE-2008-6000 - CVE House
Back to Database
Status published High CVE-2008-6000

The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008,...

Vulnerability Description

The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6000

Credits & Attribution

No credits recorded in the NVD database.

References

More from gdata

View All →
CVE-2010-5162
Race condition in G DATA TotalCare 2010 on Windows XP...
Medium 6.2
CVE-2007-5436
Buffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in...
High 7.6
CVE-2007-5041
G DATA InternetSecurity 2007 does not properly validate certain parameters...
Medium 4.6

Affected Vendor

Affected Software

antivirus 2008, internetsecurity 2008, totalcare 2008
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 28th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.