CVE-2014-9642 bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privi...
HighCVSS 7.2
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bullguard bdagent.sys | <= 1.0.0.6 | No fix listed |
| bullguard internet security | <= 14.1.287 | No fix listed |
| bullguard online backup | <= 14.1.287 | No fix listed |
| bullguard premium protection | <= 14.1.287 | No fix listed |
References
- packetstormsecurity.com exploit
- www.bullguard.com vendor-advisory
- 35994 exploit
- www.greyhathacker.net exploit
- 114478 vdb-entry