CVE-2014-9643 K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a...
HighCVSS 7.2
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing k7sentry.sys | <= 12.8.0.117 | No fix listed |
| k7computing anti-virus plus | <= 14.2.0.252 | No fix listed |
| k7computing total security | <= 14.2.0.252 | No fix listed |
| k7computing ultimate security | <= 14.2.0.252 | No fix listed |
References
- packetstormsecurity.com exploit
- 35992 exploit
- www.greyhathacker.net exploit
- 113007 vdb-entry