CVE-2014-8608

The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$".
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
VendorProductVersion
k7computingk7av_sentry_device_driver
𝑥
≤ 12.8.0.118
𝑥
= Vulnerable software versions
References
http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html
http://seclists.org/fulldisclosure/2014/Dec/45
http://www.securityfocus.com/bid/71615
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/
http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html
http://seclists.org/fulldisclosure/2014/Dec/45
http://www.securityfocus.com/bid/71615
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/