8680 matches found
IKARUS anti.virus ntguard.sys driver local elevation of privilege vulnerability
IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.7 of the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems from t...
PT-2017-13781
Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.7 Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability occurs due to the lack of validation of input values from the...
CVE-2017-14961: Improper Input Validation
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...
Interface Aware Fuzzing for Kernel Drivers: DIFUZE
Device drivers are an essential part in modern Unix-like systems to handle operations on physical devices, from hard disks and printers to digital cameras and Bluetooth speakers. The surge of new hardware, particularly on mobile devices, introduces an explosive growth of device drivers in system...
Linux kernel local denial of service vulnerability (CNVD-2017-33480)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'kvmvmioctlcheckextension' function in the arch/powerpc/kvm/powerpc.c file in versions of the Linux kernel prior ...
CVE-2017-15306
The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...
PT-2017-3296
Name of the Vulnerable Software and Affected Versions Android for MSM versions prior to the fixed version Firefox OS for MSM versions prior to the fixed version QRD Android versions prior to the fixed version Android releases from CAF using the Linux kernel versions prior to the fixed version...
Android Security Bulletin—November 2017Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2017-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners were...
UBUNTU-CVE-2017-15306
The kvmvmioctlcheckextension function in arch/powerpc/kvm/powerpc.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service NULL pointer dereference and system crash via a KVMCHECKEXTENSION KVMCAPPPCHTM ioctl call to /dev/kvm...
Input validation
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...
CVE-2017-16237
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...
CVE-2017-16237
CVE-2017-16237 affects the Vir.IT eXplorer Anti-Virus driver file VIAGLT64.SYS (pre-8.5.42). The vulnerability is an Arbitrary Write caused by input validation failure from IOCTL 0x8273007C, enabling a local attacker to write arbitrary memory. Documented impact in the connected sources: local pri...
CVE-2017-16237
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...
PT-2017-14360
Name of the Vulnerable Software and Affected Versions Vir.IT eXplorer Anti-Virus versions prior to 8.5.42 Description The issue concerns an Arbitrary Write vulnerability in the driver file VIAGLT64.SYS. This vulnerability arises due to the lack of validation of input values from the IOCtl...
CVE-2017-16237: Improper Input Validation
In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...
TG Soft Vir.IT eXplorer Anti-Virus Local Elevation of Privilege Vulnerability
TG Soft Vir.IT eXplorer Anti-Virus is a malware protection suite from TG Software Italy. A security vulnerability exists in the driver file VIAGLT64.SYS in TG Vir.IT eXplorer Anti-Virus, which originates from the program's failure to validate the input value of IOCtl 0x8273007C. An attacker can...
PT-2017-3208
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a Use After Free condition in the KGSL driver function kgsl ioctl gpu command. This condition can potentially occur in the KGSL driver, which is part of the Android...
CVE-2017-15920
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...
Null pointer dereference
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...
CVE-2017-15920
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they...