CVE-2014-3752 The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.
MediumCVSS 6.7
EPSS 0.97%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gdata-software totalprotection | <= 24.0.2.1 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20140625 CVE-2014-3752 - Arbitrary Code Execution in G Data TotalProtection 2014 mailing-list third-party-advisory
- 20140625 CVE-2014-3752 - Arbitrary Code Execution in G Data TotalProtection 2014 mailing-list
- www.portcullis-security.com third-party-advisory