« Volver al listado

CVE-2014-100039

Estado: ModificadaBaja (2.1)—

mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read. NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Malwarebytes — Malwarebytes Anti-exploit

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-100039",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-01-13T15:59:39.867",
  "references": [
    {
      "url": "http://www.osvdb.org/114249",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.malwarebytes.org/support/releasehistory/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/114249",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.malwarebytes.org/support/releasehistory/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "mbae.sys en Malwarebytes Anti-Exploit anterior a 1.05.1.2014 permite a usuarios locales causar una denegación de servicio (caída) a través de un tamaño manipulado en una llamada IOCTL no especificada, lo que provoca una lectura fuera de rango. NOTA: algunos de estos detalles se obtienen de información de terceras partes."
    }
  ],
  "lastModified": "2026-06-17T00:04:03.913",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:malwarebytes:malwarebytes_anti-exploit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21003DE7-14EA-4299-8F4F-AF9DED2DF354",
              "versionEndIncluding": "1.04.1.1012"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}