7.2

CVE-2014-3752

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gdata-software ≫ Totalprotection Version <= 24.0.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.577
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2014/Jun/125
Third Party Advisory
Mailing List
http://www.securityfocus.com/archive/1/532559/100/0/threaded
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/
Third Party Advisory