high7.2Public exploit code
CVE-2014-9642
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BullGuard (Multiple Products) - Arbitrary Write Privilege Escalation2015-02-04 · local · windows
Impact
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bullguard | Bdagent.Sys | through 1.0.0.6 |
| Bullguard | Internet Security | through 14.1.287 |
| Bullguard | Online Backup | through 14.1.287 |
| Bullguard | Premium Protection | through 14.1.287 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html
- http://www.bullguard.com/about/release-notes.aspx
- http://www.exploit-db.com/exploits/35994
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/114478
- http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html
- http://www.bullguard.com/about/release-notes.aspx
- http://www.exploit-db.com/exploits/35994
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/114478