PT-2014-8759 · K7 Computing · K7Sentry.Sys

Kyriakos Economou · Publicado 2014-12-12 · Atualizado 2014-12-16 · CVE-2014-8956

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions K7 Computing products using K7Sentry.sys kernel mode driver versions prior to 12.8.0.119

Description A stack-based buffer overflow issue exists in the K7Sentry.sys kernel mode driver, allowing local users to execute arbitrary code with kernel privileges. The exact vectors used for exploitation are not specified.

Recommendations For versions prior to 12.8.0.119, update to version 12.8.0.119 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-8956

Produtos afetados

K7Sentry.Sys

Referências · 4

• 🔥 http://seclists.org/fulldisclosure/2014/Dec/46 · Exploit
• 🔥 http://packetstormsecurity.com/files/129472/K7-Computing-Multiple-Products-K7Sentry.sys-Out-Of-Bounds-Write.html · Exploit
• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8956 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8956 · Nota de Segurança