PT-2018-17680

Name of the Vulnerable Software and Affected Versions WatchDog Anti-Malware version 2.74.186.150 Description The issue is related to the driver file ZAMGUARD32.SYS, which does not validate input values from IOCtl 0x80002054, allowing local users to cause a denial of service BSOD or possibly have...

Improper access control

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate privileges...

CVE-2018-6606

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate privileges...

CVE-2018-6606: Incorrect Permission Assignment for Critical Resource

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate privileges...

PT-2018-17657

Name of the Vulnerable Software and Affected Versions MalwareFox AntiMalware version 2.74.0.150 Description An issue was discovered that allows improper access control due to a vulnerability in the zam32.sys and zam64.sys drivers. A non-privileged process can exploit this by connecting to the...

CVE-2018-6593: Incorrect Permission Assignment for Critical Resource

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

CVE-2018-6524

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20...

CVE-2018-6523

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c...

SUPERAntiSpyware Professional Trial Denial of Service Vulnerability (CNVD-2018-02915)

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SASKUTIL.SYS driver file in SUPERAntiSpyware Professional Trial version 6.0.1254, which originates from the program's...

CVE-2018-6474

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148...

CVE-2018-5701

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003...

CVE-2018-6205

In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009...

CVE-2018-6206

In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011...

CVE-2018-6207

In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220019...

PT-2018-17409

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus version 19.0.3.019 Description The issue concerns the driver file MaxProtector32.sys, which does not validate input values from IOCtl 0x220009, allowing local users to cause a denial of service BSOD or possibly have other...

PT-2018-17410

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus version 19.0.3.019 Description The issue is related to the driver file MaxProtector32.sys, which does not validate input values from IOCtl 0x220011, allowing local users to cause a denial of service BSOD or possibly have...

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02613)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

Max Secure Anti Virus Denial of Service Vulnerability (CNVD-2018-02612)

Max Secure Anti Virus is a specialized anti-spyware software for removing adware and spyware from your PC. A denial of service vulnerability exists in the driver file MaxProtector32.sys in Max Secure Anti Virus 19.0.3.019. The vulnerability arises due to an unverified input value from IOCtl...

PT-2018-17411

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus version 19.0.3.019 Description The issue is related to the driver file MaxProtector32.sys, which does not validate input values from IOCtl 0x220019, allowing local users to cause a denial of service BSOD or possibly have...

CVE-2018-6206: Improper Input Validation

In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220011...