Description
Yenkee Hornet Gaming Mouse driver GM312Fltr.sys contains a buffer overrun vulnerability that allows attackers to crash the system by sending oversized input. Attackers can exploit the driver by sending a 2000-byte buffer through DeviceIoControl to trigger a kernel-level system crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Yenkee | Yenkee Hornet Gaming Mouse | all version | — |
References
- ExploitDB-50311 exploit
- Yenkee Vendor Webpage product
- Quadron Research Lab Kernel Driver Bugs Repository technical-description exploit
- VulnCheck Advisory: Yenkee Hornet Gaming Mouse - 'GM312Fltr.sys' Denial of Service (PoC) third-party-advisory