Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Memory corruption

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Memory corruption

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

Memory corruption

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16557

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Code injection

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

Memory corruption

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

Hardcoded credentials

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

CVE-2017-16553

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16557

CVE-2017-16557 concerns K7 Antivirus Premium (prior to 15.1.0.53) where a local user can gain privileges by sending a specific IOCTL after configuring memory in a particular way. The underlying issue is a local–privilege escalation involving an IOCTL interface exposed by the product. Public refer...

CVE-2017-16555

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2018-5713

CVE-2018-5713 affects Malwarefox Anti-Malware 2.72.169 via the zam64.sys driver. The vulnerability arises from failing to validate input values for IOCTL 0x80002010, enabling a local attacker to trigger a denial of service (BSOD) and potentially other impact. Connected sources corroborate the dri...

CVE-2017-16550

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16550

CVE-2017-16550 affects K7 Antivirus Premium prior to 15.1.0.53. The vulnerability allows a local attacker to write to arbitrary memory locations via a specific set of IOCTL calls, enabling privilege escalation. Root cause described as memory corruption presented by IOCTL handling. Impact includes...

CVE-2017-17429

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

CVE-2017-16554

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16551

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16555

CVE-2017-16555 affects K7 Antivirus Premium prior to version 15.1.0.53 . The vulnerability enables local privilege escalation by sending a specific IOCTL after a memory setup condition, as described in the CVE description. The CVSS vectors indicate local attack with high impact to confidentiality...