Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9643. PoCs published by Parvez Anwar.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in K7 Computing's K7Sentry.sys driver (CVE-2014-9643) by leveraging arbitrary write access to overwrite the HalDispatchTable and execute a token-stealing payload, granting SYSTEM privileges. The PoC includes shellcode for Windows XP SP3 and spawns a command shell upon successful exploitation.
Description
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
Exploits (1)
This exploit targets a privilege escalation vulnerability in K7 Computing's K7Sentry.sys driver (CVE-2014-9643) by leveraging arbitrary write access to overwrite the HalDispatchTable and execute a token-stealing payload, granting SYSTEM privileges. The PoC includes shellcode for Windows XP SP3 and spawns a command shell upon successful exploitation.