In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-129,CWE-787,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| shanda | maplestory_online | 160.0 |