CVE-2014-9632
AVG Internet Security <2013.3495-2015.5315 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-9632. PoCs published by Parvez Anwar.
AI-analyzed exploit summary This exploit leverages an arbitrary write vulnerability in AVG Internet Security 2015 (CVE-2014-9632) to overwrite the HAL dispatch table, enabling privilege escalation on Windows XP SP3. It includes shellcode to steal a SYSTEM token and restore overwritten pointers.
Description
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.
Exploits (1)
This exploit leverages an arbitrary write vulnerability in AVG Internet Security 2015 (CVE-2014-9632) to overwrite the HAL dispatch table, enabling privilege escalation on Windows XP SP3. It includes shellcode to steal a SYSTEM token and restore overwritten pointers.