Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9642. PoCs published by Parvez Anwar.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in BullGuard's BdAgent.sys driver (CVE-2014-9642) by overwriting the HAL dispatch table to execute arbitrary kernel code. It includes shellcode for token stealing to elevate privileges to SYSTEM on Windows XP SP3.
Description
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.
Exploits (1)
This exploit targets a privilege escalation vulnerability in BullGuard's BdAgent.sys driver (CVE-2014-9642) by overwriting the HAL dispatch table to execute arbitrary kernel code. It includes shellcode for token stealing to elevate privileges to SYSTEM on Windows XP SP3.