K7 Computing K7Sentry.sys CVE-2014-8608 NULL Pointer Dereference Denial of Service Vulnerability

Bugtraq ID:	71615
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-8608
Remote:	No
Local:	Yes
Published:	Dec 10 2014 12:00AM
Updated:	Dec 10 2014 12:00AM
Credit:	Kyriakos Economou
Vulnerable:	K7 Computing Pvt Ltd K7Sentry.sys 12.8.0.104
Not Vulnerable:	K7 Computing Pvt Ltd K7Sentry.sys 12.8.0.119

K7 Computing K7Sentry.sys CVE-2014-8608 NULL Pointer Dereference Denial of Service Vulnerability

K7 Computing K7Sentry.sys is prone to a local denial-of-service vulnerability.

Attackers can exploit this issue to crash the affected system, denying service to legitimate users.

K7 Computing K7Sentry.sys CVE-2014-8608 NULL Pointer Dereference Denial of Service Vulnerability

The researcher who discovered this issue has created a proof-of-concept, but it is not publicly available.

K7 Computing K7Sentry.sys CVE-2014-8608 NULL Pointer Dereference Denial of Service Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

K7 Computing K7Sentry.sys CVE-2014-8608 NULL Pointer Dereference Denial of Service Vulnerability

References:

• K7 Computing Pvt Ltd Homepage (K7 Computing Pvt Ltd)
  
• Vulnerability title: Null Pointer Dereference in K7 Computing Multiple Products (Portcullis Computer Security)