NVD

Id
29910  
Name
CVE-2014-1213  
Description
Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service (resource consumption, CPU consumption, and eventual crash) or spoof "ready for update" messages by performing certain operations on mutexes or events including (1) DataUpdateRequest, (2) MmfMutexSAV-****, (3) MmfMutexSAV-Info, (4) ReadyForUpdateSAV-****, (5) ReadyForUpdateSAV-Info, (6) SAV-****, (7) SAV-Info, (8) StateChange, (9) SuspendedSAV-****, (10) SuspendedSAV-Info, (11) UpdateComplete, (12) UpdateMutex, (13) UpdateRequest, or (14) SophosALMonSessionInstance, as demonstrated by triggering a ReadyForUpdateSAV event and modifying the UpdateComplete, UpdateMutex, and UpdateRequest objects.  
Reject
 
CVSS Version
2  
CVSS Score
5.6  
Severity
Medium  
CVSS Base Score
5.6  
CVSS Impact Subscore
7.8  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:C)  
Pub Date
2017-01-19  
Published
2014-02-10  
Modified Date
2014-02-11  
Seq
2014-1213  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
157687 29910 CVE-2014-1213 http://packetstormsecurity.com/files/125024/Sophos-Anti-Virus-Denial-Of-Service.html  View
157688 29910 CVE-2014-1213 20140131 CVE-2014-1213 - Denial of Service in Sophos Anti Virus  View
157689 29910 CVE-2014-1213 http://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1213/  View
157690 29910 CVE-2014-1213 20140131 CVE-2014-1213 - Denial of Service in Sophos Anti Virus  View
157691 29910 CVE-2014-1213 65286  View
157692 29910 CVE-2014-1213 http://www.sophos.com/en-us/support/knowledgebase/2300/7200/1031/120401.aspx  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12481 JVNDB-2014-001356 VDL で使用される Sophos Anti-Virus エンジンにおけるアンチウィルスプロテクションを回避される脆弱性 VDL で使用される Sophos Anti-Virus (SAVi) エンジンは、特定のグローバルおよびセッションオブジェクトに対して ACL を設定しないため、アンチウィルスプロテクションを回避される、サービス運用妨害 (リソースの消費、CPU 資源の消費、および最終的にクラッシュ) 状態にされる、または "ready for update" のメッセージを偽装される脆弱性が存在します。 CVE-2014-1213 68499 CVE-2014-1213 29910 5.6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001356.html 2014-01-31 2014-02-12 View