CVE-2014-9633
Comodo Backup 4.4.0.0 - Null Pointer Dereference Privilege Escalation
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference.
El controlador bdisk.sys en COMODO Backup anterior a 4.4.1.23 permite a atacantes remotos ganar privilegios a través de un manejo de dispositivos manipulado, lo que provoca una referencia a puntero nulo.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-22 CVE Reserved
- 2015-01-26 First Exploit
- 2015-02-03 CVE Published
- 2023-08-29 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://forums.comodo.com/news-announcements-feedback-cb/comodo-backup-44123-released-t107293.0.html | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/35905 | 2015-01-26 | |
| http://packetstormsecurity.com/files/130094/Comodo-Backup-4.4.0.0-NULL-Pointer-Dereference.html | 2024-08-06 | |
| http://www.exploit-db.com/exploits/35905 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|