K7Firewall < 14.0.1.16 Packet Driver Privilege Escalation Vulnerability

K7 Computing product is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-7136

Heap-based buffer overflow in the K7FWFilt.sys kernel mode driver aka K7Firewall Packet Driver before 14.0.1.16, as used in multiple K7 Computing products, allows local users to execute arbitrary code with kernel privileges via a crafted parameter in a DeviceIoControl API call...

CVE-2014-7136

CVE-2014-7136 describes a heap-based buffer overflow in the K7FWFilt.sys kernel-mode driver (K7Firewall Packet Driver) used by K7 Computing products, prior to version 14.0.1.16. The vulnerability allows a local attacker to gain kernel privileges by crafting a parameter in a DeviceIoControl call. ...