Description
Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call.
References
- https://www.korelogic.com/Resources/Advisories/KL-001-2015-008.txt
- http://packetstormsecurity.com/files/134987/Dell-Authentication-Driver-Uncontrolled-Write.html
- 20151218 KL-001-2015-008 : Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address mailing-list
- 79643 vdb-entry
- 20151218 KL-001-2015-008 : Dell Pre-Boot Authentication Driver Uncontrolled Write to Arbitrary Address mailing-list