Security Vulnerabilities fixed in Carbon Black Sensor ADVISORY: 2018-02-12
Description
cb.exe and cbstream.sys driver in Carbon Black 5.1.1.60603 allows attackers to cause a denial of service (out-of-bounds read, invalid pointer dereference, and application crash) by leveraging access to the NetMon named pipe. Also unprivielged users can perform unauthorized actions in this version.
Affected Applications
Carbon Black Sensor