CVE-2014-8956 Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to execute arbitrary...
HighCVSS 7.2
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing k7av sentry device driver | <= 12.8.0.118 | No fix listed |
References
- packetstormsecurity.com exploit
- 20141210 CVE-2014-8956 - Privilege Escalation In K7 Computing Multiple Products [K7Sentry.sys] exploit mailing-list
- www.portcullis-security.com exploit