CVE-2014-9642

high

Description

bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-9452

http://www.osvdb.org/114478

http://www.greyhathacker.net/?p=818

http://www.exploit-db.com/exploits/35994

http://www.bullguard.com/about/release-notes.aspx

http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html

Details

Source: Mitre, NVD

Published: 2015-02-06

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H