PT-2018-6292

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6294

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6293

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6296

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6512

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue concerns insufficient authentication of user-controlled input to the K7Sentry device, allowing a local user with a LOW integrity process to access a raw hard disk by...

CVE-2017-16554: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16550: Undefined Security Weakness

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16551: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16556: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16555: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

PT-2018-6291

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6289

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

CVE-2017-16553: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16552: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

Apps Exposing Children to Porn Ads Booted From Google Play

Sixty app were removed from the Google Play marketplace in December that were infected with malware dubbed AdultSwine that in some cases generated pornographic ads on apps aimed at children. The developers behind the malicious apps also scammed victims with scareware techniques and attempted to...

CVE-2018-5276

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e018. NOTE: the vendor reported that they "have not been able to reproduce the issu...

CVE-2018-5273

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e014. NOTE: the vendor reported that they "have not been able to reproduce the issu...

CVE-2018-5275

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020. NOTE: the vendor reported that they "have not been able to reproduce the issu...

CVE-2018-5270

In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e010. NOTE: the vendor reported that they "have not been able to reproduce the issu...

Input validation

DISPUTED In Malwarebytes Premium 3.3.1.2183, the driver file FARFLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e010. NOTE: the vendor reported that they "have not been able to reproduce...