CVE-2014-9632

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-02-06 · updated 2026-06-17
Weakness: CWE-264

Description

The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x830020f8 IOCTL call.

Affected products

AVG Internet Security: from 2013 before 2013.3495; from 2015 before 2015.5314 — fixed in 2013.3495, 2015.5314
AVG Protection: from 2015 through 2015.5314

How to fix

Upgrade to a fixed version: AVG Internet Security 2013.3495, 2015.5314. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html
http://www.avg.com/eu-en/avg-release-notes
http://www.exploit-db.com/exploits/35993
http://www.greyhathacker.net/?p=818
http://www.osvdb.org/113824
http://packetstormsecurity.com/files/130248/AVG-Internet-Security-2015.0.5315-Privilege-Escalation.html
http://www.avg.com/eu-en/avg-release-notes
http://www.exploit-db.com/exploits/35993
http://www.greyhathacker.net/?p=818
http://www.osvdb.org/113824

Get alerted when CVE-2014-9632 or the next vulnerability affects your stack