CVE-2014-4971: CVE-2014-4971

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-4971

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Microsoft Windows XP SP3 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Microsoft Windows XP SP3和Windows Server 2003 SP2都是美国微软（Microsoft）公司的产品。Windows XP SP3是一个XP操作系统的补丁升级包。Windows Server 2003 SP2是一个Server 2003操作系统的补丁升级包。 Microsoft Windows XP SP3版本的MQ Access Control子系统中的MQAC.sys驱动程序和Bluetooth Personal Area Networking子系统中的BthP

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2014-4971

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2014-4971

Please Login to view more intelligence information

https://www.korelogic.com/Resources/Advisories/KL-001-2014-002.txtx_refsource_MISC
http://packetstormsecurity.com/files/128674/Microsoft-Bluetooth-Personal-Area-Networking-BthPan.sys-Privilege-Escalation.htmlx_refsource_MISC
https://www.korelogic.com/Resources/Advisories/KL-001-2014-003.txtx_refsource_MISC
http://packetstormsecurity.com/files/127536/Microsoft-XP-SP3-MQAC.sys-Arbitrary-Write-Privilege-Escalation.htmlx_refsource_MISC
http://packetstormsecurity.com/files/127535/Microsoft-XP-SP3-BthPan.sys-Arbitrary-Write-Privilege-Escalation.htmlx_refsource_MISC
http://blogs.technet.com/b/srd/archive/2014/10/14/accessing-risk-for-the-october-2014-security-updates.aspxx_refsource_CONFIRM
http://www.exploit-db.com/exploits/34112exploitx_refsource_EXPLOIT-DB
http://www.exploit-db.com/exploits/34131exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/60974third-party-advisoryx_refsource_SECUNIA
http://www.exploit-db.com/exploits/34982exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/68764vdb-entryx_refsource_BID
http://www.osvdb.org/109387vdb-entryx_refsource_OSVDB
http://www.securitytracker.com/id/1031025vdb-entryx_refsource_SECTRACK
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-062vendor-advisoryx_refsource_MS
http://www.securityfocus.com/archive/1/532844/100/0/threadedmailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/532843/100/0/threadedmailing-listx_refsource_BUGTRAQ
http://seclists.org/fulldisclosure/2014/Jul/96mailing-listx_refsource_FULLDISC
https://nvd.nist.gov/vuln/detail/CVE-2014-4971

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2014-4971

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2014-4971

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2014-4971

III. Intelligence Information for CVE-2014-4971

IV. Related Vulnerabilities

V. Comments for CVE-2014-4971

Leave a comment