Unscored severity · published Dec 12, 2014
CVE-2014-7136
Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver (aka K7Firewall Packet Driver) before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KP
K7firewall Packet Driver · K7computing
through 14.0.1.15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7136
Exploit
http://packetstormsecurity.com/files/129474/K7-Computing-Multiple-Products-K7FWFilt.sys-Privilege-Escalation.html
Exploit
http://seclists.org/fulldisclosure/2014/Dec/47
Exploit
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7136/