CVE-2014-9632
AVG Internet Security 2015.0.5315 - Arbitrary Write Privilege Escalation
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.
El controlador TDI (avgtdix.sys) en AVG Internet Security anterior a 2013.3495 Hot Fix 18 y 2015.x anterior a 2015.5315 y Protection anterior a 2015.5315 permite a usuarios locales escribir a localizaciones de memoria arbitrarias, y como consecuencia ganar privilegios, a través de una llamada 0x830020f8 IOCTL manipulada.
AVG Internet Security 2015 suffers from an arbitrary write privilege escalation vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-22 CVE Reserved
- 2015-02-04 First Exploit
- 2015-02-05 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.greyhathacker.net/?p=818 | Third Party Advisory | |
| http://www.osvdb.org/113824 | Broken Link |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/35993 | 2015-02-04 | |
| http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html | 2024-08-06 | |
| http://www.exploit-db.com/exploits/35993 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.avg.com/eu-en/avg-release-notes | 2019-02-01 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Avg Search vendor "Avg" | Protection Search vendor "Avg" for product "Protection" | >= 2015 <= 2015.5314 Search vendor "Avg" for product "Protection" and version " >= 2015 <= 2015.5314" | - |
Affected
| ||||||
| Avg Search vendor "Avg" | Internet Security Search vendor "Avg" for product "Internet Security" | >= 2013 < 2013.3495 Search vendor "Avg" for product "Internet Security" and version " >= 2013 < 2013.3495" | - |
Affected
| ||||||
| Avg Search vendor "Avg" | Internet Security Search vendor "Avg" for product "Internet Security" | >= 2015 < 2015.5314 Search vendor "Avg" for product "Internet Security" and version " >= 2015 < 2015.5314" | - |
Affected
| ||||||