CVE-2014-8608

Description

The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$".

References

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-8445

http://www.securityfocus.com/bid/71615

http://seclists.org/fulldisclosure/2014/Dec/45

http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS