TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37939)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A security vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fails to...

PT-2017-15002

Name of the Vulnerable Software and Affected Versions TG Soft Vir.IT eXplorer Lite version 8.5.65 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact. This is due to the driver file VIRAGTLT.SYS not validating input values from IOCt...

CVE-2017-14968: Improper Input Validation

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830000c4, a related issue to CVE-2017-17113...

CVE-2017-14967: Improper Input Validation

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000080...

CVE-2017-17795: Improper Input Validation

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

CVE-2017-17804: Improper Input Validation

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084...

CVE-2017-17800: Improper Input Validation

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798...

CVE-2017-14962: Out-of-bounds Write

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112...

CVE-2017-14963: Improper Input Validation

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000058...

CVE-2017-17801: Improper Input Validation

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E060...

PT-2017-13787

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus versions prior to 2.16.18 Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability is caused by the failure to validate input values fr...

PT-2017-15001

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.20 Description The issue in IKARUS anti.virus allows local users to cause a denial of service, potentially leading to a Blue Screen of Death BSOD, due to the driver file ntguard.SYS not validating input values fr...

PT-2017-13783

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus versions prior to 2.16.18 Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability occurs due to the driver's failure to validate input...

CVE-2017-17799: Improper Input Validation

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068...

PT-2017-13788

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus versions prior to 2.16.18 Description The issue is related to an Arbitrary Write vulnerability in the ntguard.sys driver. This vulnerability occurs due to the lack of validation of input values from the IOCtl 0x830000c4...

PT-2017-13784

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus versions prior to 2.16.18 Description The issue is related to the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This is due to the driver not validating input values from the IOCtl...

CVE-2017-9710

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...

Race condition

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOCGSDEROTATORFENCE ioctl command can be used to cause a Use After Free condition...

Design/Logic Flaw

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a graphics driver ioctl handler, the lack of copyfromuser function calls may result in writes to kernel memory...

Buffer overflow

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI NOTIFY REQ messages can be called from multiple contexts which can result in buffer overflow of msg cache...