CVE-2014-2597

CVE-2014-2597 describes a denial-of-service vulnerability in PCNetSoftware RAC Server versions 4.0.4 and 4.0.5. Local users can trigger a system crash or disable the keyboard by providing a large input buffer to unspecified IOCTL requests in RACDriver.sys, leading to a buffer over-read. The vulnerability has a CVSS score of 4.9, indicating a medium severity, with a local attack vector and low attack complexity, resulting in a complete denial of service. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, nor are there any publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. The CVE has received minimal community discussion or media coverage, suggesting a low level of public awareness or interest.