CVE-2014-9643
High
Description
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
SeverityHigh
CVSS7.2
Exploit probability—
ProductK7computing K7sentry.sys
PublishedFeb 6, 2015
First seenFeb 6, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing k7sentry.sys | v ≤ 12.8.0.117 | — |
| k7computing anti-virus_plus | v ≤ 14.2.0.252 | — |
| k7computing total_security | v ≤ 14.2.0.252 | — |
| k7computing ultimate_security | v ≤ 14.2.0.252 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.