SafeNet Authentication Client SACSrv heap buffer overflow allows privilege escalation
Regular users on Windows can seize administrator control of the PC.
Summary
A heap-based buffer overflow in the SACSrv service of SafeNet Authentication Client on Windows lets an authenticated non-administrator user run code with Local System privileges. Releases up to and including 10.9 R3 GA (build 10.9.7449) are affected.
Affected when
- A non-administrator user account that can log on to the PC
- SAC 10.9 R3 GA (build 10.9.7449) or earlier
What to do
Check that you run a release newer than 10.9 R3 GA (build 10.9.7449), and read the Thales advisory for the fixed version.
Products and platforms
CVE IDs
Sources
- Advisory: supportportal.thalesgroup.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen