Netskope Threat Labs

OS-WINDOWS Microsoft Windows SetProcessDeviceMap arbitrary file read attempt

IPS-CFW

2 SIDs: 45873, 200329

Description

Detects an attempt to exploit CVE-2018-0877, an information disclosure flaw that can expose sensitive data in Microsoft Windows SetProcessDeviceMap arbitrary.

CVEs

CVE-2018-0877

Related malware families

Microsoft

References