CVE-2014-4971
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Description
Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected] .
URL
Source(s)
Tag(s)
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
CVE, MITRE
Vendor Advisory
http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html
CVE, MITRE
http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html
CVE, MITRE
http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html
CVE, MITRE
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/96
CVE, MITRE
Exploit
http://seclists.org/fulldisclosure/2014/Jul/97
CVE, MITRE
Exploit
http://secunia.com/advisories/60974
CVE, MITRE
Permissions Required
http://www.exploit-db.com/exploits/34112
CVE, MITRE
Exploit
http://www.exploit-db.com/exploits/34131
CVE, MITRE
http://www.exploit-db.com/exploits/34982
CVE, MITRE
Exploit
http://www.osvdb.org/109387
CVE, MITRE
Broken Link
http://www.securityfocus.com/archive/1/532843/100/0/threaded
CVE, MITRE
http://www.securityfocus.com/archive/1/532844/100/0/threaded
CVE, MITRE
http://www.securityfocus.com/bid/68764
CVE, MITRE
http://www.securitytracker.com/id/1031025
CVE, MITRE
Third Party Advisory
VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062
CVE, MITRE
https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt
CVE, MITRE
Exploit
https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt
CVE, MITRE
Exploit
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-20
Improper Input Validation
NIST
Change History
8 change records found show changes
CVE Modified by CVE 11/20/2024 9:11:11 PM
Action
Type
Old Value
New Value
Added
Reference
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx
Added
Reference
http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html
Added
Reference
http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html
Added
Reference
http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html
Added
Reference
http://seclists.org/fulldisclosure/2014/Jul/96
Added
Reference
http://seclists.org/fulldisclosure/2014/Jul/97
Added
Reference
http://secunia.com/advisories/60974
Added
Reference
http://www.exploit-db.com/exploits/34112
Added
Reference
http://www.exploit-db.com/exploits/34131
Added
Reference
http://www.exploit-db.com/exploits/34982
Added
Reference
http://www.osvdb.org/109387
Added
Reference
http://www.securityfocus.com/archive/1/532843/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/532844/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/68764
Added
Reference
http://www.securitytracker.com/id/1031025
Added
Reference
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062
Added
Reference
https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txt
Added
Reference
https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txt
CVE Modified by MITRE 5/13/2024 11:17:10 PM
Action
Type
Old Value
New Value
CVE Modified by MITRE 10/12/2018 6:07:28 PM
Action
Type
Old Value
New Value
Added
Reference
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062 [No Types Assigned]
Removed
Reference
http://technet.microsoft.com/security/bulletin/MS14-062 [Mitigation, Patch, Vendor Advisory]
CVE Modified by MITRE 10/09/2018 3:49:52 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/532843/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/532844/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/532843/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/532844/100/0/threaded [No Types Assigned]
CVE Modified by MITRE 1/06/2017 10:00:24 PM
Action
Type
Old Value
New Value
Added
Reference
http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.html [No Types Assigned]
Added
Reference
http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.html [No Types Assigned]
Added
Reference
http://www.exploit-db.com/exploits/34131 [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/archive/1/532843/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/archive/1/532844/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/bid/68764 [No Types Assigned]
Modified Analysis by NIST 9/06/2016 1:28:25 PM
Action
Type
Old Value
New Value
Added
CWE
CWE-20
Changed
Reference Type
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx No Types Assigned
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspx Vendor Advisory
Changed
Reference Type
http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html No Types Assigned
http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.html VDB Entry, Exploit
Changed
Reference Type
http://secunia.com/advisories/60974 No Types Assigned
http://secunia.com/advisories/60974 Permissions Required
Changed
Reference Type
http://technet.microsoft.com/security/bulletin/MS14-062 No Types Assigned
http://technet.microsoft.com/security/bulletin/MS14-062 Mitigation, Vendor Advisory, Patch
Changed
Reference Type
http://www.exploit-db.com/exploits/34112 No Types Assigned
http://www.exploit-db.com/exploits/34112 Exploit
Changed
Reference Type
http://www.exploit-db.com/exploits/34982 No Types Assigned
http://www.exploit-db.com/exploits/34982 Exploit
Changed
Reference Type
http://www.osvdb.org/109387 No Types Assigned
http://www.osvdb.org/109387 Broken Link
Changed
Reference Type
http://www.securitytracker.com/id/1031025 No Types Assigned
http://www.securitytracker.com/id/1031025 Third Party Advisory, VDB Entry
CVE Modified by MITRE 11/13/2014 10:06:24 PM
Action
Type
Old Value
New Value
Added
Reference
http://www.exploit-db.com/exploits/34982
Initial CVE Analysis 7/28/2014 1:25:47 PM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2014-4971 NVD
Published Date: 07/26/2014 NVD
Last Modified: 04/12/2025
Source: MITRE