CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It may lead to a denial-of-service condition.
CVE
CVE-2014-2885
Severity
HIGH
CVSS
7.1
EPSS
0.29%
Original NVD Description
Multiple integer overflows in TrueCrypt 7.1a allow local users to (1) obtain sensitive information via vectors involving a crafted item->OriginalLength value in the MainThreadProc function in EncryptedIoQueue.c or (2) cause a denial of service (memory consumption) via vectors involving large StartingOffset and Length values in the ProcessVolumeDeviceControlIrp function in Ntdriver.c.
Related CVEs
Other vulnerabilities affecting the same vendor(s)