exploitDog

CVE-2014-7136

Опубликовано: 12 дек. 2014

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:k7computing:k7firewall_packet_driver:*:*:*:*:*:*:*:*

Версия до 14.0.1.15 (включая)

EPSS

Процентиль: 30%

0.00114

Низкий

7.2 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-xh58-cx6c-2h9h

github

больше 3 лет назад

Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call.

EPSS

Процентиль: 30%

0.00114

Низкий

7.2 High

CVSS2

Дефекты

CWE-119