PT-2015-4320 · Bullguard · Bdagent.Sys+4

Published 2015-02-06 · Updated 2015-02-09 · CVE-2014-9642

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BullGuard Antivirus versions prior to 15.0.288 BullGuard Internet Security versions prior to 15.0.288 BullGuard Premium Protection versions prior to 15.0.288 BullGuard Online Backup versions prior to 15.0.288

Description The issue allows local users to gain privileges by writing data to arbitrary memory locations via a crafted 0x0022405c IOCTL call to the bdagent.sys driver.

Recommendations For versions prior to 15.0.288, update to version 15.0.288 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-9642

Affected Products

Bullguard Antivirus

Bullguard Internet Security

Bullguard Online Backup

Bullguard Premium Protection

Bdagent.Sys

References · 7

• 🔥 http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/35994 · Exploit
• 🔥 http://exploit-db.com/exploits/35994 · Exploit
• 🔥 http://greyhathacker.net/?p=818 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-9642 · Security Note
• http://bullguard.com/about/release-notes.aspx · Vendor Advisory
• http://osvdb.org/114478 · Note