EUVD-2017-8279

Malware in sbrugna...

EUVD-2017-7094

Malware in sbrugna...

CVE-2017-15643

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

IKARUS anti.virus Multiple Arbitrary/Out of Bounds Write Vulnerabilities

IKARUS anti.virus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IKARUS anti.virus ntguard.sys driver arbitrary write vulnerability (CNVD-2017-37951)

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.18 before the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems...

CVE-2017-14968

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c4, a related issue to CVE-2017-17113...

CVE-2017-14969

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114...

CVE-2017-14962

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112...

CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

IKARUS Anti-Virus Denial of Service Vulnerability

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000084. A local user can exploit this vulnerability to cause ...

IKARUS Anti-Virus Denial of Service Vulnerability (CNVD-2018-01339)

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000058. A local user can exploit this vulnerability to cause ...

IKARUS Anti-Virus Denial of Service Vulnerability (CNVD-2018-01338)

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000088. A local user can exploit this vulnerability to cause ...

Memory corruption

ntguardx64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request...

Remote code execution

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

CVE-2017-15643

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

CVE-2017-15643

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

CVE-2017-15643

The CVE-2017-15643 entry concerns IKARUS Anti Virus for Windows 2.16.7. Multiple connected documents confirm an active attacker can achieve remote code execution via a MITM-capable update pathway: IKARUS AV uses cleartext HTTP for updates; an attacker can coerce the client into an update, then re...

CVE-2017-15643: Inconsistent Interpretation of HTTP Requests

An active network attacker MiTM can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP for updates along with a CRC32 checksum and an update value for verification of the downloaded files. The attacker first forces the client t...

PT-2017-14135

Name of the Vulnerable Software and Affected Versions IKARUS Anti Virus version 2.16.7 Description The issue allows an active network attacker, in a man-in-the-middle MiTM position, to achieve remote code execution on a machine running the affected software. This is possible because the software...