high7.2Public exploit code
CVE-2014-9643
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- K7 Computing (Multiple Products) - Arbitrary Write Privilege Escalation2015-02-04 · local · windows
Impact
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| K7computing | K7sentry.Sys | through 12.8.0.117 |
| K7computing | Anti-Virus Plus | through 14.2.0.252 |
| K7computing | Total Security | through 14.2.0.252 |
| K7computing | Ultimate Security | through 14.2.0.252 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/35992
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/113007
- http://packetstormsecurity.com/files/130246/K7-Computing-14.2.0.240-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/35992
- http://www.greyhathacker.net/?p=818
- http://www.osvdb.org/113007