CVE-2014-9632
published 2015-02-06CVE-2014-9632: The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local…
PriorityP338high7.2CVSS 2.0
AVLACLAuNCCICAC
EXPLOIT
EPSS
1.46%
70.3th percentile
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| avg | internet_security | >= 2013 < 2013.3495 | 2013.3495 |
| avg | internet_security | >= 2015 < 2015.5314 | 2015.5314 |
| avg | protection | 2015 – 2015.5314 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.htmlhttp://www.avg.com/eu-en/avg-release-noteshttp://www.exploit-db.com/exploits/35993http://www.greyhathacker.net/?p=818http://www.osvdb.org/113824http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.htmlhttp://www.avg.com/eu-en/avg-release-noteshttp://www.exploit-db.com/exploits/35993http://www.greyhathacker.net/?p=818http://www.osvdb.org/113824
2015-02-06
Published