CVE-2014-4974

The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/
http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html
http://www.securityfocus.com/bid/70770
http://seclists.org/fulldisclosure/2014/Oct/118
https://exchange.xforce.ibmcloud.com/vulnerabilities/98312

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:eset:personal_firewall_ndis_filter:*:*:*:*:*:*:*:*

Information

Published : 2014-11-04 08:55

Updated : 2017-08-28 18:35

NVD link : CVE-2014-4974

Mitre link : CVE-2014-4974

JSON object : View

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

Products Affected

eset

personal_firewall_ndis_filter

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/", "name": "https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-4974/", "tags": [], "refsource": "MISC"}, {"url": "http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html", "name": "http://packetstormsecurity.com/files/128874/ESET-7.0-Kernel-Memory-Leak.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/70770", "name": "70770", "tags": [], "refsource": "BID"}, {"url": "http://seclists.org/fulldisclosure/2014/Oct/118", "name": "20141028 CVE-2014-4974 - Kernel Memory Leak in ESET Multiple Windows Products", "tags": [], "refsource": "FULLDISC"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98312", "name": "eset-cve20144974-info-disc(98312)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-200"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2014-4974", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2014-11-04T16:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:eset:personal_firewall_ndis_filter:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "1183_\\(20140214\\)"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-08-29T01:35Z"}