Description
tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
OpenVPN tap-windows6
Default version status: unaffected
9.26 or earlieraffected
OpenVPN OpenVPN-GUI
Default version status: unaffected
2.6.9 and earlieraffected