CVE-2014-4971

高 7.2CVE-2014-4971 · 26/07/2014 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
—	この脆弱性の影響を受ける製品バージョンはまだ掲載されていません。

概要

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.

参考情報

blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx · Vendor Advisory
packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html
packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html
packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html · Exploit
seclists.org/fulldisclosure/2014/Jul/96 · Exploit
seclists.org/fulldisclosure/2014/Jul/97 · Exploit
secunia.com/advisories/60974 · Permissions Required
exploit-db.com/exploits/34112 · Exploit
exploit-db.com/exploits/34131
exploit-db.com/exploits/34982 · Exploit
osvdb.org/109387 · Broken Link
securityfocus.com/archive/1/532843/100/0/threaded
securityfocus.com/archive/1/532844/100/0/threaded
securityfocus.com/bid/68764
securitytracker.com/id/1031025 · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062
korelogic.com/Resources/Advisories/KL-001-2014-002.txt · Exploit
korelogic.com/Resources/Advisories/KL-001-2014-003.txt · Exploit

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン