An exploitable arbitrary file delete vulnerability exists in SoftPerfect RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can allow an unprivileged user to delete any file on the filesystem. An attacker can send a malicious IRP to trigger this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: talos
Published: 2020-08-04T19:03:46
Updated: 2024-08-04T12:18:18.379Z
Reserved: 2020-05-26T00:00:00
Link: CVE-2020-13522
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-08-04T20:15:12.103
Modified: 2022-06-07T18:42:21.210
Link: CVE-2020-13522
Redhat
No data.