Sandboxie Buffer Overflow Vulnerability in SbieDrv.sys API_SET_SECURE_PARAM

A buffer overflow vulnerability has been identified in Sandboxie versions 0.0.1 through prior to 1.15.12. The issue arises in the SbieDrv.sys component, specifically within the API_SET_SECURE_PARAM function. An arithmetic overflow in the memory allocation subsystem can lead to a smaller memory allocation than requested, allowing for a buffer overflow condition.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, with the worst-case scenario allowing for arbitrary code execution.

Remediation

Users can upgrade to Sandboxie version 1.15.12 or later to address this vulnerability.