PT-2015-4320 · Bullguard · Bdagent.Sys+4

Publicado 2015-02-06 · Atualizado 2015-02-09 · CVE-2014-9642

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BullGuard Antivirus versions prior to 15.0.288 BullGuard Internet Security versions prior to 15.0.288 BullGuard Premium Protection versions prior to 15.0.288 BullGuard Online Backup versions prior to 15.0.288

Description The issue allows local users to gain privileges by writing data to arbitrary memory locations via a crafted 0x0022405c IOCTL call to the bdagent.sys driver.

Recommendations For versions prior to 15.0.288, update to version 15.0.288 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9642

Produtos afetados

Bullguard Antivirus

Bullguard Internet Security

Bullguard Online Backup

Bullguard Premium Protection

Bdagent.Sys

Referências · 7

• 🔥 http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/35994 · Exploit
• 🔥 http://exploit-db.com/exploits/35994 · Exploit
• 🔥 http://greyhathacker.net/?p=818 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9642 · Nota de Segurança
• http://osvdb.org/114478 · Nota
• http://bullguard.com/about/release-notes.aspx · Aviso do Fabricante