CVE-2017-16554

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

Memory corruption

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16552

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16549

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16551

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16554

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16549

CVE-2017-16549 affects K7 Antivirus Premium prior to version 15.1.0.53 . The issue allows local users to write to arbitrary memory locations via a specific set of IOCTL calls, resulting in local privilege escalation (gaining higher privileges). Exploitation status is not detailed in the provided ...

CVE-2017-17429

CVE-2017-17429 affects K7 Antivirus Premium prior to 15.1.0.53. A local user with a LOW integrity process can abuse the K7Sentry device by sending a specific IOCTL to access the raw hard disk, due to insufficient input authentication. This results in potential partial confidentiality exposure of ...

CVE-2017-16556

CVE-2017-16556 affects K7 Antivirus Premium (versions before 15.1.0.53). The vulnerability is described as a local input handling flaw that allows a local attacker to write to arbitrary memory locations. The NVD entry lists a local attack vector with low attack complexity and a base score indicat...

CVE-2017-16557

CVE-2017-16557 concerns K7 Antivirus Premium (prior to 15.1.0.53) where a local user can gain privileges by sending a specific IOCTL after configuring memory in a particular way. The underlying issue is a local–privilege escalation involving an IOCTL interface exposed by the product. Public refer...

CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

PT-2018-6290

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

CVE-2017-16549: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16557: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-17429: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

PT-2018-6287

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6295

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to write to arbitrary memory locations using user-controlled input. Recommendations: For versions prior to 15.1.0.53, update to version 15.1.0.53 or...