Unscored severity · published Feb 6, 2015
CVE-2014-9642
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and…
–
CVSS
1.1%
EPSS
No
On KEV
Description
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BD
Bdagent.sys · Bullguard
through 1.0.0.6 · source: NVD
IS
Internet Security · Bullguard
through 14.1.287 · source: NVD
OB
Online Backup · Bullguard
through 14.1.287 · source: NVD
PP
Premium Protection · Bullguard
through 14.1.287 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-9642
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-9642
Exploit
http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html
Vendor Advisory
http://www.bullguard.com/about/release-notes.aspx
Exploit
http://www.exploit-db.com/exploits/35994
Exploit
http://www.greyhathacker.net/?p=818
www.osvdb.org
http://www.osvdb.org/114478