Lucene search

K
cveMitreCVE-2014-100039
HistoryJan 13, 2015 - 3:59 p.m.

CVE-2014-100039

2015-01-1315:59:39
CWE-20
mitre
web.nvd.nist.gov
31
cve-2014-100039
mbae.sys
malwarebytes
anti-exploit
denial of service
crash
vulnerability
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.9%

mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd
Node
malwarebytesmalwarebytes_anti-exploitRange1.04.1.1012
VendorProductVersionCPE
malwarebytesmalwarebytes_anti-exploit*cpe:2.3:a:malwarebytes:malwarebytes_anti-exploit:*:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

21.9%