Multiple Vulnerabilities Patched in ASRock Drivers

By Ionut Arghire on October 25, 2018
 
SecureAuth Labs security researchers have discovered multiple vulnerabilities in low-level drivers installed by ASRock utilities.
 
Established in 2002, ASRock is the third largest motherboard brand globally.
Headquartered in Taipei, Taiwan, the company has branches in Europe and the United States. The maker offers a series of utilities that provide users control over certain settings and functions.
 
SecureAuth discovered a series of security flaws in AsrDrv101.sys and AsrDrv102.sys low-level drivers that the ASRock RGBLED and other ASRock branded utilities install.
By exploiting these vulnerabilities, a local attacker can elevate privileges on the system.
 
Full Article.