Unscored severity · published Dec 12, 2014
CVE-2014-8956
Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KS
K7av Sentry Device Driver · K7computing
through 12.8.0.118 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-8956
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-8956
Exploit
http://packetstormsecurity.com/files/129472/K7-Computing-Multiple-Products-K7Sentry.sys-Out-Of-Bounds-Write.html
Exploit
http://seclists.org/fulldisclosure/2014/Dec/46
Exploit
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8956/
More from K7av Sentry Device Driver
–
CVE-2014-8608
The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service…