Unscored severity · published Jul 5, 2005
CVE-2005-2145
The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The kernel driver in Prevx Pro 2005 1.0 does not verify the source of certain messages, which allows local users to bypass protection by sending certain messages to the driver, as demonstrated by sending an "allow" message to bypass a warning message.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Prevx Pro 2005 · Prevx
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2145
Vendor Advisory
http://secunia.com/advisories/15885
securitytracker.com
http://securitytracker.com/id?1014346
More from Prevx Pro 2005
–
CVE-2005-2144
Prevx Pro 2005 1.0 allows local users to bypass file protection and modify files by using MapViewOfFile to perform memory mapping on the file