PT-2015-4314 · Avg · Avgtdix.Sys+2

Publicado 2015-02-06 · Atualizado 2019-02-01 · CVE-2014-9632

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVG Internet Security versions prior to 2013.3495 Hot Fix 18 AVG Internet Security versions 2015.x prior to 2015.5315 AVG Protection versions prior to 2015.5315

Description The issue allows local users to gain privileges by writing to arbitrary memory locations via a crafted 0x830020f8 IOCTL call to the TDI driver (avgtdix.sys).

Recommendations For AVG Internet Security versions prior to 2013.3495 Hot Fix 18, update to version 2013.3495 Hot Fix 18 or later. For AVG Internet Security versions 2015.x prior to 2015.5315, update to version 2015.5315 or later. For AVG Protection versions prior to 2015.5315, update to version 2015.5315 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9632

Produtos afetados

Avg Internet Security

Avg Protection

Avgtdix.Sys

Referências · 7

• 🔥 https://exploit-db.com/exploits/35993 · Exploit
• 🔥 http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html · Exploit
• 🔥 http://exploit-db.com/exploits/35993 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9632 · Nota de Segurança
• http://avg.com/eu-en/avg-release-notes · Aviso do Fabricante
• http://greyhathacker.net/?p=818 · Nota
• http://osvdb.org/113824 · Nota