Lucene search

[email protected]CVE-2017-16556

HistoryJan 16, 2018 - 7:29 p.m.

CVE-2017-16556

2018-01-1619:29:00

CWE-20

[email protected]

web.nvd.nist.gov

k7 antivirus

premium

cve-2017-16556

security vulnerability

memory corruption

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations.

CPENameOperatorVersion
k7computing:antivirusk7computing antiviruslt15.1.0.53
k7computing:internet_securityk7computing internet securitylt15.1.0297
k7computing:ultimate_securityk7computing ultimate securitylt15.1.0324
k7computing:endpointk7computing endpointlt14.2.0137
k7computing:total_securityk7computing total securitylt15.1.0324
k7computing:total_securityk7computing total securitylt16.0.0131
k7computing:antivirusk7computing antiviruslt15.1.0308

CPE	Name	Operator	Version
k7computing:antivirus	k7computing antivirus	lt	15.1.0.53
k7computing:internet_security	k7computing internet security	lt	15.1.0297
k7computing:ultimate_security	k7computing ultimate security	lt	15.1.0324
k7computing:endpoint	k7computing endpoint	lt	14.2.0137
k7computing:total_security	k7computing total security	lt	15.1.0324
k7computing:total_security	k7computing total security	lt	16.0.0131
k7computing:antivirus	k7computing antivirus	lt	15.1.0308

References

support.k7computing.com/index.php?/selfhelp/view-article/2nd-Advisory-issued-on-6th-November-2017

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2017-16556

prion1 cvelist1 openvas1