gdwfpcd.sys in G Data Total Security prior to 2019-02-22 allows an malicious user to bypass ACLs because Interpreted Device Characteristics lacks FILE_DEVICE_SECURE_OPEN and therefore files and directories "inside" the \\.\gdwfpcd device are not properly protected, leading to unintended impersonation or object creation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
gdata-software total security |
Vulmon