CVE-2018-6777

In Jiangmin Antivirus 16.0.0.100, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220400...

nProtect AVS Denial of Service Vulnerability (CNVD-2018-02848)

nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKFsAv.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x220c20. A local user...

SUPERAntiSpyware Professional Trial Denial of Service Vulnerability (CNVD-2018-02914)

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SASKUTIL.SYS driver file in SUPERAntiSpyware Professional Trial version 6.0.1254, which originates from the program's...

CVE-2018-5079

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002130...

CVE-2017-14962

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37940)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fai...

Sophos HitmanPro.Alert solution and Sophos Clean SurfRight HitmanPro security vulnerabilities

Sophos HitmanPro.Alert solution and Sophos Clean are both virus protection software from Sophos UK.SurfRight HitmanPro is one of the malware scanning tools available. A security vulnerability exists in versions prior to SurfRight HitmanPro 3.7.20 Build 286 in Sophos HitmanPro.Alert solution and...

CVE-2017-7441

In Sophos SurfRight HitmanPro before 3.7.20 Build 286 included in the HitmanPro.Alert solution and Sophos Clean, a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical informatio...

VMware Workstation 12 Pro Denial Of Service

/ Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMwareAr Workstation 12 Pro 12.5.5 build-5234757 Affected: VMware...

VMware Workstation 12 Pro - Denial of Service

/ Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMware® Workstation 12 Pro 12.5.5 build-5234757 Affected: VMware...

VMware Workstation 12 Pro - Denial of Service

VMware Workstation 12 Pro - Denial of Service / Title: NULL pointer dereference vulnerability in vstor2 driver VMware Workstation Pro/Player CVE: 2017-4916 VMSA-2017-0009 Author: Borja Merino @BorjaMerino Date: May 18, 2017 Tested on: Windows 10 Pro and Windows 7 Pro SP1 with VMware® Workstation ...

Multiple Trend Micro Products tmeext.sys Driver Elevation of Privilege Vulnerabilities

Trend Micro Antivirus Plus, Internet Security and Maximum Security are all antivirus programs from Trend Micro. A security vulnerability exists in the tmeext.sys driver prior to version 2.0.0.1015. A local attacker can exploit this vulnerability by writing to an arbitrary memory location via a...

ESTsoft ALYac Anti-Virus 1.5 < 5.0.1.2 - Local Privilege Escalation

ESTsoft ALYac Anti-Virus 1.5 with AYDrvNT.sys = 5.0.1.2 Local Kernel Mode Privilege Escalation Vulnerability AUTHOR MJ0011 EMAIL thdecoder$126.com VULNERABLE PRODUCTS ALYac Anti-Virus 1.5 DETAILS: AYDrvNT.sys create a device called "AYDrvNTALYAC" , and handles the device io control code = 0x223e2...