Lucene search
HistoryNov 04, 2014 - 4:55 p.m.
CVE-2014-4974
cve-2014-4974
eset
personal firewall
ndis filter
epfwndis.sys
kernel mode driver
ioctl calls
information security
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0 through 7.0, allows local users to obtain sensitive information from kernel memory via crafted IOCTL calls.
Affected configurations
Node
esetpersonal_firewall_ndis_filterRange≤1183_\(20140214\)
| CPE | Name | Operator | Version |
|---|---|---|---|
| eset:personal_firewall_ndis_filter | eset personal firewall ndis filter | le | 1183_\(20140214\) |
Related
cvelist
cvelist
CVE-2014-4974
2014-11-04 16:00:00
nvd
nvd
CVE-2014-4974
2014-11-04 16:55:06
prion
prion
Memory corruption
2014-11-04 16:55:00
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2014-4974