STOPzilla AntiMalware Arbitrary Write Vulnerability (CNVD-2019-40577)

STOPzilla AntiMalware is a malware removal software. An arbitrary write vulnerability exists in the driver file szkg64.sys in STOPzilla AntiMalware 6.5.2.59. The vulnerability stems from an unverified output buffer address value starting at IOCtl 0x8000206B. An attacker can exploit this...