Beijing Rising International Rising Antivirus 2008 through 2010 does not properly…
Priority LOW 35CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Beijing Rising International Rising Antivirus 2008 through 2010 does not properly validate input to certain IOCTLs, including 0x83003C07, which allows local users to gain privileges via crafted IOCTL requests to the (1) HookCont.sys, (2) HookNtos.sys, (3) HOOKREG.sys, or (4) HookSys.sys device driver; or the (5) RsNTGdi.sys kernel module, reachable through \Device\RSNTGDI.
Why it matters now
EPSS 0.01616 76th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:rising-global:rising_antivirus:2008:*:*:*:*:*:*:* | 2008 | Vulnerable | Rising-global |
| cpe:2.3:a:rising-global:rising_antivirus:2009:*:*:*:*:*:*:* | 2009 | Vulnerable | Rising-global |
| cpe:2.3:a:rising-global:rising_antivirus:2010:*:*:*:*:*:*:* | 2010 | Vulnerable | Rising-global |
- cpe:2.3:a:rising-global:rising_antivirus:2008:*:*:*:*:*:*:* Versions 2008 Vulnerable ·Rising-global
- cpe:2.3:a:rising-global:rising_antivirus:2009:*:*:*:*:*:*:* Versions 2009 Vulnerable ·Rising-global
- cpe:2.3:a:rising-global:rising_antivirus:2010:*:*:*:*:*:*:* Versions 2010 Vulnerable ·Rising-global
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2010-1591
- 2026-10-03 Alias added: GHSA-6m4q-47fc-c7jm
References
More Rising-global Rising Antivirus vulnerabilities
- TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
- TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
- TI-2012-01279 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!… CVSS 2.0MEDIUM 4.3
- TI-2012-01278 The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00… CVSS 2.0MEDIUM 4.3
- TI-2012-01275 The CAB file parser in Dr.Web 5.0.2.03300, Trend Micro HouseCall 9.120.0.1004, Kaspersky… CVSS 2.0MEDIUM 4.3
- TI-2012-01268 The ELF file parser in Quick Heal (aka Cat QuickHeal) 11.00, McAfee Anti-Virus Scanning… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2010-1591 · CVE Program
- CVE-2010-1591 · NVD
- FIRST EPSS
- GHSA-6m4q-47fc-c7jm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences