CVE-2014-9642

BullGuard Antivirus <15.0.288 - Privilege Escalation

Title source: llm

Description

bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call.

Exploits (1)

exploitdb WORKING POC

by Parvez Anwar · clocalwindows

https://www.exploit-db.com/exploits/35994

View Code ZIP pw:eip

References (5)

[Exploit] http://packetstormsecurity.com/files/130247/BullGuard-14.1.285.4-Privilege-Escalation.html

[Vendor Advisory] http://www.bullguard.com/about/release-notes.aspx

[Exploit] http://www.exploit-db.com/exploits/35994

[Exploit] http://www.greyhathacker.net/?p=818

[Third Party Advisory, VDB Entry] http://www.osvdb.org/114478

Scores

EPSS 0.0108

EPSS Percentile 77.9%

Details

CWE

CWE-264

Status published

Products (4)

bullguard/bdagent.sys < 1.0.0.6

bullguard/internet_security < 14.1.287

bullguard/online_backup < 14.1.287

bullguard/premium_protection < 14.1.287

Published Feb 06, 2015

Tracked Since Feb 18, 2026