CVE-2017-17112

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

CVE-2017-17112

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

CVE-2017-17114: Improper Restriction of Operations within the Bounds of a Memory Buffer

ntguard.sys and ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request...

CVE-2017-17113: NULL Pointer Dereference

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request...

CVE-2017-17112: Improper Restriction of Operations within the Bounds of a Memory Buffer

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

PT-2017-14719

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a NULL pointer dereference in the ntguard x64.sys driver, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x830000c4. Recommendations For...

PT-2017-14718

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a Pool Corruption vulnerability in the ntguard x64.sys driver, version 0.18780.0.0, which can be exploited via a specific DeviceIoControl request, 0x83000058. Recommendation...

PT-2017-14720

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15 Description The issue is related to a Memory Corruption problem in the ntguard.sys and ntguard x64.sys drivers, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x83000084...

IKARUS AntiVirus 2.16.7 Privilege Escalation

/ Exploit Title - IKARUS anti.virus Arbitrary Write Privilege Escalation Date - 13th November 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - https://www.ikarussecurity.com/ Tested Version - 2.16.7 Driver Version - 0.18780.0.0 - ntguardx64.sys Tested on OS - 64bit Windows 7 and...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

PT-2017-14360

Name of the Vulnerable Software and Affected Versions Vir.IT eXplorer Anti-Virus versions prior to 8.5.42 Description The issue concerns an Arbitrary Write vulnerability in the driver file VIAGLT64.SYS. This vulnerability arises due to the lack of validation of input values from the IOCtl...

CVE-2017-16237: Improper Input Validation

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

TG Soft Vir.IT eXplorer Anti-Virus Local Elevation of Privilege Vulnerability

TG Soft Vir.IT eXplorer Anti-Virus is a malware protection suite from TG Software Italy. A security vulnerability exists in the driver file VIAGLT64.SYS in TG Vir.IT eXplorer Anti-Virus, which originates from the program's failure to validate the input value of IOCtl 0x8273007C. An attacker can...

Vir.IT eXplorer Anti-Virus 8.5.39 - VIAGLT64.SYS Local Privilege Escalation

Vir.IT eXplorer Anti-Virus 8.5.39 - VIAGLT64.SYS Local Privilege Escalation / Exploit Title - Vir.IT eXplorer Anti-Virus Arbitrary Write Privilege Escalation Date - 1st November 2017 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.tgsoft.it Tested Version - 8.5.39 Driver...

Null pointer dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

Null pointer dereference

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15920

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...

CVE-2017-15921

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they...