CVE-2014-9643
HighSummary
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before version 14.2.0.253 allows local users to write to arbitrary memory locations, potentially gaining privileges.
Risk Assessment
Exploitation of this vulnerability may allow local users to escalate privileges, posing a significant security risk to the system.
Recommendation
It is recommended to update the software to version 14.2.0.253 or later to mitigate this vulnerability.
Other vulnerabilities in K7Sentry.sys
See all- CVE-2017-17700Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with value 0x950025a4.
- CVE-2017-17699Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with the value 0x950025ac.
- CVE-2017-17465Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with code 0x95002574.
- CVE-2017-17464Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows NULL pointer dereference via a DeviceIoControl request with code 0x95002570.
- CVE-2018-8044High
The vulnerability in K7Antivirus Premium 15.1.0.53 is caused by incorrect access control in the K7Sentry.sys driver. It allows a local attacker to execute a process with elevated privileges.
Original NVD description (English source)
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.