Overview
- Description
- K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:k7computing:k7sentry.sys:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17C91E6D-D5E7-44BA-AFF2-4F15310214F8",
"versionEndIncluding": "12.8.0.117"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:k7computing:anti-virus_plus:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C242D193-E0BE-41D5-B322-5E6EAF7B0A02",
"versionEndIncluding": "14.2.0.252"
},
{
"criteria": "cpe:2.3:a:k7computing:total_security:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F508ABB-EA38-480A-B01E-058F833F550A",
"versionEndIncluding": "14.2.0.252"
},
{
"criteria": "cpe:2.3:a:k7computing:ultimate_security:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE14BB8C-346A-4AC1-B1F4-5B33349EE4C4",
"versionEndIncluding": "14.2.0.252"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]