PT-2014-8759 · K7 Computing · K7Sentry.Sys

Kyriakos Economou · Published 2014-12-12 · Updated 2014-12-16 · CVE-2014-8956

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions K7 Computing products using K7Sentry.sys kernel mode driver versions prior to 12.8.0.119

Description A stack-based buffer overflow issue exists in the K7Sentry.sys kernel mode driver, allowing local users to execute arbitrary code with kernel privileges. The exact vectors used for exploitation are not specified.

Recommendations For versions prior to 12.8.0.119, update to version 12.8.0.119 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-8956

Affected Products

K7Sentry.Sys

References · 4

• 🔥 http://seclists.org/fulldisclosure/2014/Dec/46 · Exploit
• 🔥 http://packetstormsecurity.com/files/129472/K7-Computing-Multiple-Products-K7Sentry.sys-Out-Of-Bounds-Write.html · Exploit
• 🔥 https://portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8956 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8956 · Security Note