NVD

Id
36264  
Name
CVE-2014-9643  
Description
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-06  
Modified Date
2015-02-09  
Seq
2014-9643  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
185278 36264 CVE-2014-9643 http://packetstormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html  View
185279 36264 CVE-2014-9643 35992  View
185280 36264 CVE-2014-9643 http://www.greyhathacker.net/?p=818  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18980 JVNDB-2014-007855 複数の K7 Computing 製品の K7Sentry.sys における任意のメモリ領域に書き込まれる脆弱性 K7 Computing Ultimate Security、Anti-Virus Plus、および Total Security の K7Sentry.sys には、任意のメモリ領域に書き込まれ、その結果、権限を取得される脆弱性が存在します。 CVE-2014-9643 76936 CVE-2014-9643 36264 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007855.html 2014-10-09 2015-02-16 View