CVE:CVE-2015-7359
CNNVD:CNNVD-201510-768
TrueCrypt、VeraCrypt和CipherShed for Windows都是基于Windows平台的免费、开源的磁盘加密软件。
TrueCrypt 7.0版本、VeraCrypt 1.15之前的版本和CipherShed中的Ntdriver.c文件的IsVolumeAccessibleByCurrentUser和MountDevice方法存在安全漏洞。本地攻击者可利用该漏洞获取提升的权限。
solution:Upgrade ciphershed ciphershed to a higher version than 0.7.5.0,and avoid the version (,0.7.5.0]; Upgrade idrix veracrypt to a higher version than 1.14,and avoid the version (,1.14]; Upgrade truecrypt truecrypt to a higher version than 7.0,and avoid the version 7.0