CVE-2014-2597

PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
VendorProductVersion
remote-racrac_server
4.0.4
remote-racrac_server
4.0.5
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://seclists.org/fulldisclosure/2014/Apr/221
http://secunia.com/advisories/58090
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/
http://seclists.org/fulldisclosure/2014/Apr/221
http://secunia.com/advisories/58090
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/