Yenkee Hornet Gaming Mouse Buffer Overrun Vulnerability in Driver GM312Fltr.sys Allowing Denial-of-Service

A buffer overrun vulnerability has been identified in the Yenkee Hornet Gaming Mouse driver GM312Fltr.sys. This vulnerability allows attackers to crash the system by sending oversized input through the DeviceIoControl interface. Exploitation of this vulnerability leads to a kernel-level system crash.

Impact

Exploitation of this vulnerability causes a kernel-level system crash, disrupting normal operation and potentially leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by sending a 2000-byte buffer through the DeviceIoControl function to the GM312Fltr device. This can be done using a Python script that utilizes the ctypes library to call the DeviceIoControl function with the oversized buffer, triggering the buffer overrun and causing the system to crash.