CVE-2019-11490

An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2019-04-24

Last modified

2024-08-04

Weaknesses

CWE-415

Affected products

• Npcap (Nmap)

References

• https://github.com/nmap/nmap/issues/1568