Vulnerability Spotlight : Multiple Vulnerabilities in WIBU-SYSTEMS WibuKey.sys

These vulnerabilities were discovered by Marcin ‘Icewall’ Noga of Cisco Talos.

Executive Summary

WibuKey is a Digital Rights Management (DRM) solution that has been used in a large number of solutions such as Straton, Archicad, GRAPHISOFT, V-Ray and others. It has been leveraged by over 3,000 companies around the world to protect intellectual property and other digital content. Cisco Talos recently discovered multiple vulnerabilities in WibuKey that could be leveraged by an attacker to disclose potentially sensitive information, perform privilege escalation, or obtain arbitrary code execution on affected systems.

In accordance with our coordinated disclosure policy, Cisco Talos worked with Wibu Systems to ensure that these issues are resolved and that a software update is available for affected customers. It is recommended that this update be applied as quickly as possible to ensure that systems are no longer affected by these vulnerabilities.

SymmetricalDataSecurity

Thursday, December 20, 2018