Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-4971
HistoryJul 26, 2014 - 3:55 p.m.

CVE-2014-4971

2014-07-2615:55:04
CWE-20
[email protected]
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

34.5%

JSON

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.

Affected configurations

Nvd
Node
microsoftwindows_xpsp3
VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

References

Related

securityvulns 4
seebug 3
metasploit 2
korelogic 2
packetstorm 4
canvas 1
zdt 4
exploitpack 2
cvelist 1
openvas 1
exploitdb 4
cve 1
prion 1
nessus 1
kaspersky 1
securityvulns
securityvulns
KL-001-2014-003 : Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation
2014-07-22 00:00:00
Microsoft Windows XP privilege escalation
2014-07-22 00:00:00
KL-001-2014-002 : Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation
2014-07-22 00:00:00
seebug
seebug
Microsoft XP SP3 - BthPan.sys Arbitrary Write Privilege Escalation
2014-07-24 00:00:00
Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
2014-11-13 00:00:00
Microsoft XP SP3 MQAC.sys - Arbitrary Write Privilege Escalation
2014-07-24 00:00:00
metasploit
metasploit
MQAC.sys Arbitrary Write Privilege Escalation
2014-07-22 14:04:12
MS14-062 Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
2014-07-22 22:17:06
korelogic
korelogic
Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation
2014-07-18 00:00:00
Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation
2014-07-18 00:00:00
packetstorm
packetstorm
Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation
2014-07-21 00:00:00
MQAC.sys Arbitrary Write Privilege Escalation
2014-07-25 00:00:00
Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
2014-10-15 00:00:00
canvas
canvas
Immunity Canvas: MQAC
2014-07-26 15:55:00
zdt
zdt
Microsoft XP SP3 MQAC.sys - Arbitrary Write Privilege Escalation Exploit
2014-07-22 00:00:00
Microsoft Bluetooth Personal Area Networking (BthPan.sys) Privilege Escalation
2014-10-16 00:00:00
MQAC.sys Arbitrary Write Privilege Escalation Exploit
2014-07-25 00:00:00
exploitpack
exploitpack
Microsoft Windows XP SP3 - BthPan.sys Arbitrary Write Privilege Escalation
2014-07-21 00:00:00
Microsoft Windows XP SP3 - MQAC.sys Arbitrary Write Privilege Escalation
2014-07-19 00:00:00
cvelist
cvelist
CVE-2014-4971
2014-07-26 15:00:00
openvas
openvas
Microsoft Windows Message Queuing Service Privilege Escalation Vulnerability (2993254)
2014-10-15 00:00:00
exploitdb
exploitdb
Microsoft Windows XP SP3 - 'MQAC.sys' Arbitrary Write Privilege Escalation
2014-07-19 00:00:00
Microsoft Windows XP SP3 - 'BthPan.sys' Arbitrary Write Privilege Escalation
2014-07-21 00:00:00
Microsoft Windows XP SP3 - 'MQAC.sys' Arbitrary Write Privilege Escalation (Metasploit)
2014-07-25 00:00:00
cve
cve
CVE-2014-4971
2014-07-26 15:55:04
prion
prion
Memory corruption
2014-07-26 15:55:00
nessus
nessus
MS14-062: Vulnerability in Message Queuing Service Could Allow Elevation of Privilege (2993254)
2014-10-15 00:00:00
kaspersky
kaspersky
KLA10601 Multiple vulnerabilities in Microsoft products
2014-11-11 00:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

34.5%

JSON
Related for NVD:CVE-2014-4971
securityvulns4seebug3metasploit2korelogic2packetstorm4canvas1zdt4exploitpack2cvelist1openvas1exploitdb4cve1prion1nessus1kaspersky1