CVE-2014-9632
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.46%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.
- CVSS 2.0
- 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.46% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- avg/protection · avg/internet security
- Source
- cve@mitre.org
References
- http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.htmlExploit, Third Party Advisory
- http://www.avg.com/eu-en/avg-release-notesVendor Advisory
- http://www.exploit-db.com/exploits/35993Exploit, Third Party Advisory
- http://www.greyhathacker.net/?p=818Third Party Advisory
- http://www.osvdb.org/113824Broken Link
- http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.htmlExploit, Third Party Advisory
- http://www.avg.com/eu-en/avg-release-notesVendor Advisory
- http://www.exploit-db.com/exploits/35993Exploit, Third Party Advisory
- http://www.greyhathacker.net/?p=818Third Party Advisory
- http://www.osvdb.org/113824Broken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.