CVE-2014-3752

Published: Feb 1, 2018Modified: Nov 21, 2024

6.7

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.

Affected (1)

Products: Gdata Software: Totalprotection

Gdata Software

1 product

Totalprotection

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gdata Software Totalprotection	Up to 24.0.2.1

Related CWEs

CWE-264

References (8)

http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2014/Jun/125

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/archive/1/532559/100/0/threaded

Source: cve@mitre.org

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2014/Jun/125

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.securityfocus.com/archive/1/532559/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.