Test ID:	1.3.6.1.4.1.25623.1.0.809088
Category:	Privilege escalation
Title:	K7Firewall < 14.0.1.16 Packet Driver Privilege Escalation Vulnerability
Summary:	K7 Computing product is prone to a privilege escalation; vulnerability.
Description:	Summary: K7 Computing product is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to the function handling IOCTL 0x830020C4 does not validate the size of the output buffer parameter passed in the DeviceIoControl API, which leads to a heap overflow on buffer data initialization. Vulnerability Impact: Successful exploitation will allow allows local users to execute arbitrary code with kernel privileges. Affected Software/OS: K7Firewall Packet Driver version 11.0.1.5 and prior. Solution: Upgrade to K7Firewall Packet Driver version 14.0.1.16 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-7136 http://seclists.org/fulldisclosure/2014/Dec/47 http://packetstormsecurity.com/files/129474/K7-Computing-Multiple-Products-K7FWFilt.sys-Privilege-Escalation.html https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-7136/
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.