CVE-2014-8608 The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer derefere...
MediumCVSS 4.9
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$".
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing k7av sentry device driver | <= 12.8.0.118 | No fix listed |
References
- packetstormsecurity.com exploit
- 20141210 CVE-2014-8608 - Null Pointer Dereference In K7 Computing Multiple Products [K7Sentry.sys] exploit mailing-list
- 71615 vdb-entry
- www.portcullis-security.com exploit