PT-2014-7797 · K7 Computing · K7Fwfilt.Sys

Published 2014-12-12 · Updated 2014-12-15 · CVE-2014-7136

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions K7FWFilt.sys versions prior to 14.0.1.16

Description A heap-based buffer overflow issue exists in the K7FWFilt.sys kernel mode driver, which can be exploited by local users to execute arbitrary code with kernel privileges. This is achieved by passing a crafted parameter in a DeviceIoControl API call.

Recommendations For versions prior to 14.0.1.16, update to version 14.0.1.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the DeviceIoControl API call to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-7136

Affected Products

K7Fwfilt.Sys

References · 4

• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7136 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Dec/47 · Exploit
• 🔥 http://packetstormsecurity.com/files/129474/K7-Computing-Multiple-Products-K7FWFilt.sys-Privilege-Escalation.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-7136 · Security Note