What’s Vulnerable › Vulnerabilities

CVE-2014-8608

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-12-12 · updated 2026-06-17

Description

The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a denial of service (NULL pointer dereference) as demonstrated by a filename containing "crashme$$".

Affected products

• K7Computing K7Av Sentry Device Driver: through 12.8.0.118

References

• http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html
• http://seclists.org/fulldisclosure/2014/Dec/45
• http://www.securityfocus.com/bid/71615
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/
• http://packetstormsecurity.com/files/129470/K7-Computing-Multiple-Products-Null-Pointer-Dereference.html
• http://seclists.org/fulldisclosure/2014/Dec/45
• http://www.securityfocus.com/bid/71615
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-8608/

Get alerted when CVE-2014-8608 or the next vulnerability affects your stack