CVE-2014-3752

Severity: medium (CVSS 6.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-01 · updated 2026-06-17
Weakness: CWE-264

Description

The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator rights to execute arbitrary code with SYSTEM privileges via a crafted 0x83170180 call.

Affected products

Gdata-Software Totalprotection: through 24.0.2.1

References

http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html
http://seclists.org/fulldisclosure/2014/Jun/125
http://www.securityfocus.com/archive/1/532559/100/0/threaded
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/
http://packetstormsecurity.com/files/127227/G-Data-TotalProtection-2014-Code-Execution.html
http://seclists.org/fulldisclosure/2014/Jun/125
http://www.securityfocus.com/archive/1/532559/100/0/threaded
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-3752/

Get alerted when CVE-2014-3752 or the next vulnerability affects your stack