CVE-2017-16913

The CVE-2017-16913 issue affects the Linux kernel USB/IP stack. Specifically, stub_recv_cmd_submit() in drivers/usb/usbip/stub_rx.c fails to validate CMD_SUBMIT packets, enabling a remote attacker to trigger a denial of service via arbitrary memory allocation. Affected kernel versions: before 4.1...

CVE-2017-16913

The "stubrecvcmdsubmit" function drivers/usb/usbip/stubrx.c in the Linux Kernel before version 4.14.8, 4.9.71, and 4.4.114 when handling CMDSUBMIT packets allows attackers to cause a denial of service arbitrary memory allocation via a specially crafted USB over IP packet...

K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02140)

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53. A local attacker can exploit the vulnerability by performing a write operation to an arbitrary memory location with the help of a...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16549

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

Memory corruption

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16556

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16550: Undefined Security Weakness

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

PT-2018-6289

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6291

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6287

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6293

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6295

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to write to arbitrary memory locations using user-controlled input. Recommendations: For versions prior to 15.1.0.53, update to version 15.1.0.53 or...

CVE-2017-16556: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

K7 Total Security Arbitrary Content Read Vulnerability

K7 Total Security is a network security protection device from K7 Computing India. A security vulnerability exists in versions prior to K7 Total Security 15.1.0.305 that stems from the program failing to adequately filter user input. An attacker can exploit the vulnerability to read arbitrary...

CVE-2017-18019: Improper Input Validation

In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the...

PT-2018-6615

Name of the Vulnerable Software and Affected Versions: K7 Total Security versions prior to 15.1.0.305 Description: The issue arises from insufficient sanitization of user-controlled input to the K7Sentry device, allowing the input to compare an arbitrary memory address with a fixed value. This ca...

Intel Content Protection HECI Service - Type Confusion Privilege Escalation

Intel Content Protection HECI Service - Type Confusion Privilege Escalation Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1358 Intel Content Protection HECI Service Type Confusion EoP Platform: Tested on Windows 10, service version 9.0.2.117 Class: Elevation of Privilege...