InsydeH2O Drivers Buffer Overflow Vulnerability in egwindrv.sys

A buffer overflow vulnerability has been identified in the InsydeH2O driver 'egwindrv.sys'. This vulnerability arises because the driver uses the RTL_QUERY_REGISTRY_DIRECT flag to read a registry value, which an untrusted user-mode application may exploit to cause a buffer overflow.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, allowing for potential arbitrary code execution or other malicious actions.

Remediation

Users are advised to update to version 200.02.01.00 or newer. For those using HP tools, versions 6.51.00, 1.2.4.0, 6.2.5.0, and 1.2.0.2 are recommended.