IKARUS anti.virus pool corruption vulnerability

IKARUS anti.virus is a set of antivirus products from IKARUS Security Software Austria. ntguardx64.sys is one of the self-protection system. A security vulnerability exists in IKARUS anti.virus version 2.16.15 in version 0.18780.0.0 of ntguardx64.sys. No details of the vulnerability are provided ...

CVE-2017-17113

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request...

CVE-2017-17112

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

CVE-2017-17114

ntguard.sys and ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request...

CVE-2017-17113

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request...

CVE-2017-17103

Fiyo CMS 2.0.7 has SQL injection in /apps/appuser/sysuser.php via $POSTname or $POSTemail. This vulnerability can lead to escalation from normal user privileges to administrator privileges...

CVE-2017-17112

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

PT-2017-14720

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a Memory Corruption problem in the ntguard.sys and ntguard x64.sys drivers, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x83000084...

PT-2017-14719

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a NULL pointer dereference in the ntguard x64.sys driver, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x830000c4. Recommendations For...

PT-2017-14718

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a Pool Corruption vulnerability in the ntguard x64.sys driver, version 0.18780.0.0, which can be exploited via a specific DeviceIoControl request, 0x83000058. Recommendation...

CVE-2017-17114: Improper Restriction of Operations within the Bounds of a Memory Buffer

ntguard.sys and ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request...

CVE-2017-17113: NULL Pointer Dereference

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request...

CVE-2017-17112: Improper Restriction of Operations within the Bounds of a Memory Buffer

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

IKARUS AntiVirus 2.16.7 Privilege Escalation

/ Exploit Title - IKARUS anti.virus Arbitrary Write Privilege Escalation Date - 13th November 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.ikarussecurity.com/ Tested Version - 2.16.7 Driver Version - 0.18780.0.0 - ntguardx64.sys Tested on OS - 64bit Windows 7 and...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

PT-2017-14360

Name of the Vulnerable Software and Affected Versions Vir.IT eXplorer Anti-Virus versions prior to 8.5.42 Description The issue concerns an Arbitrary Write vulnerability in the driver file VIAGLT64.SYS. This vulnerability arises due to the lack of validation of input values from the IOCtl...

TG Soft Vir.IT eXplorer Anti-Virus Local Elevation of Privilege Vulnerability

TG Soft Vir.IT eXplorer Anti-Virus is a malware protection suite from TG Software Italy. A security vulnerability exists in the driver file VIAGLT64.SYS in TG Vir.IT eXplorer Anti-Virus, which originates from the program's failure to validate the input value of IOCtl 0x8273007C. An attacker can...

CVE-2017-16237: Improper Input Validation

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...