EUVD-2017-6445

Malware in sbrugna...

Design/Logic Flaw

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114...

CVE-2017-14969

CVE-2017-14969 is an Arbitrary Write vulnerability in the ntguard.sys driver of IKARUS anti.virus prior to 2.16.18, caused by failure to validate input values from IOCTL 0x83000084. This is related to CVE-2017-17114. The issue is described as a local vulnerability with potential for complete conf...

CVE-2017-17114

CVE-2017-17114 involves a memory corruption vulnerability in IKARUS anti.virus 2.16.15, specifically in the ntguard.sys and ntguard_x64.sys (version 0.18780.0.0). The issue is exposed via a 0x83000084 DeviceIoControl request that can lead to memory corruption. Connected entries also reference rel...