CVE-2014-9633 – Comodo Backup 4.4.0.0 - Null Pointer Dereference Privilege Escalation

https://notcve.org/view.php?id=CVE-2014-9633

The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference. El controlador bdisk.sys en COMODO Backup anterior a 4.4.1.23 permite a atacantes remotos ganar privilegios a través de un manejo de dispositivos manipulado, lo que provoca una referencia a puntero nulo. • https://www.exploit-db.com/exploits/35905 http://forums.comodo.com/news-announcements-feedback-cb/comodo-backup-44123-released-t107293.0.html http://packetstormsecurity.com/files/130094/Comodo-Backup-4.4.0.0-NULL-Pointer-Dereference.html http://www.exploit-db.com/exploits/35905 • CWE-264: Permissions, Privileges, and Access Controls •