PT-2017-11693

Name of the Vulnerable Software and Affected Versions Android for MSM versions affected versions not specified Firefox OS for MSM versions affected versions not specified QRD Android versions affected versions not specified Description The issue arises in the camera application due to the Camera...

Design/Logic Flaw

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

CVE-2017-14961

CVE-2017-14961 affects IKARUS anti.virus 2.16.7, where the ntguard.sys driver contains an Arbitrary Write vulnerability caused by not validating inputs from IOCTL 0x8300000c. This is a local privilege escalation flaw that can overwrite kernel memory and elevate privileges. Public sources document...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

CVE-2017-14961: Improper Input Validation

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

IKARUS anti.virus ntguard.sys driver local elevation of privilege vulnerability

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.7 of the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems from t...

PT-2017-13781

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.7 Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability occurs due to the lack of validation of input values from the...

Interface Aware Fuzzing for Kernel Drivers: DIFUZE

Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...

Linux kernel local denial of service vulnerability (CNVD-2017-33480)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'kvmvmioctlcheckextension' function in the arch/powerpc/kvm/powerpc.c file in versions of the Linux kernel prior ...

CVE-2017-15306

The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...

PT-2017-3296

Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version Android releases from CAF using the Linux kernel versions prior to the fixed version...

Android Security Bulletin—November 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners were...

UBUNTU-CVE-2017-15306

The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...

Input validation

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-16237

CVE-2017-16237 affects the Vir.IT eXplorer Anti-Virus driver file VIAGLT64.SYS (pre-8.5.42). The vulnerability is an Arbitrary Write caused by input validation failure from IOCTL 0x8273007C, enabling a local attacker to write arbitrary memory. Documented impact in the connected sources: local pri...

PT-2017-14360

Name of the Vulnerable Software and Affected Versions Vir.IT eXplorer Anti-Virus versions prior to 8.5.42 Description The issue concerns an Arbitrary Write vulnerability in the driver file VIAGLT64.SYS. This vulnerability arises due to the lack of validation of input values from the IOCtl...

CVE-2017-16237: Improper Input Validation

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...