CVE:CVE-2014-9643
CNNVD:CNNVD-201502-125
K7 Computing Ultimate Security、Anti-Virus Plus和Total Security都是印度K7 Computing公司的杀毒软件。
K7Sentry.sys文件中存在安全漏洞。本地攻击者可借助特制的0x95002570、0x95002574、0x95002580、0x950025a8、0x950025ac或0x950025c8 IOCTL调用利用该漏洞写入任意内存，获取权限。以下产品及版本受到影响：K7 Computing Ultimate Security，Anti-Virus Plus，Total Security 14.2.0.253之前版本。
solution:Upgrade k7computing k7sentry.sys to a higher version than 12.8.0.117,and avoid the version (,12.8.0.117]; Upgrade k7computing anti-virus_plus to a higher version than 14.2.0.252,and avoid the version (,14.2.0.252]; Upgrade k7computing total_security to a higher version than 14.2.0.252,and avoid the version (,14.2.0.252]; Upgrade k7computing ultimate_security to a higher version than 14.2.0.252,and avoid the version (,14.2.0.252]