Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-36424. PoCs published by M. Akil Gündoğan, secunnix.
AI-analyzed exploit summary This PoC demonstrates a null pointer dereference vulnerability in K7 Ultimate Security's K7RKScan.sys driver (version < 17.0.2019) via IOCTL 0x222010, leading to a BSOD. The exploit opens a handle to the driver and sends a crafted DeviceIoControl request with a null input buffer.
Description
K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of a NULL pointer dereference.
Exploits (2)
This PoC demonstrates a null pointer dereference vulnerability in K7 Ultimate Security's K7RKScan.sys driver (version < 17.0.2019) via IOCTL 0x222010, leading to a BSOD. The exploit opens a handle to the driver and sends a crafted DeviceIoControl request with a null input buffer.
The repository contains a functional proof-of-concept exploit for CVE-2024-36424, a null pointer dereference vulnerability in K7 Ultimate Security's K7RKScan.sys driver. The PoC triggers a BSOD by sending a crafted IOCTL request with a null input buffer to the vulnerable driver.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H