CVE-2018-6947

CVE: CVE-2018-6947
Published: 2018-02-28T22:29Z
Description Language: en
Description: An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.
References:
https://www.exploit-db.com/exploits/44167/
https://www.exploit-db.com/exploits/44168/

NoMachine – The Road To Code Execution Without Fuzzing – CVE-2018-6947


https://www.nomachine.com/SU02P00194
https://www.nomachine.com/SU02P00195
https://www.nomachine.com/TR02P08408