387 matches found
Design/Logic Flaw
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
CVE-2019-16896
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
CVE-2019-16896
CVE-2019-16896 affects K7 Ultimate Security 16.0.0117. The backup module K7BKCExt.dll improperly validates administrative privileges, enabling a local, user‑privilege bypass that allows an arbitrary file write via a symbolic link attack with file restoration functionality. Documented impact acros...
CVE-2019-16897
In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...
CVE-2019-16897
In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...
Design/Logic Flaw
In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...
CVE-2019-16897
CVE-2019-16897 affects K7 Antivirus Premium/Total Security/Ultimate Security (16.0.xxx up to 16.0.0120). The issue stems from the module K7TSHlpr.dll improperly validating the user’s administrative privileges, enabling arbitrary registry writes in the K7AVOptn.dll module and facilitating privileg...
CVE-2019-16897
In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll...
K7 Anti-Virus Premium Multiple Vulnerabilities (Nov 2017)
K7 Anti-Virus Premium is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
K7 Anti-Virus Premium Detection (Windows SMB Login)
Detects the installed version of K7 Anti-Virus Premium. The script logs in via smb, searches for K7 Anti-Virus Premium in the registry and gets the version from SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02142)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in K7 Antivirus Premium versions prior to 15.1.0.53. A local attacker can exploit this vulnerability by performing a write operation to an arbitrary memory location with the help of a...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02141)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53. A local attacker can exploit the vulnerability to gain privileges by sending a specific IOCTL...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02147)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53. A local attacker can exploit the vulnerability by performing a write operation to an arbitrary memory location with the help of a...
K7 Antivirus Premium Elevation of Privilege Vulnerability
K7 Antivirus Premium is an antivirus program developed by K7. An elevation of privilege vulnerability exists in versions prior to K7 Antivirus Premium 15.1.0.53. A local user can gain privileges by sending a specific IOCTL after setting up memory in a specific way...
K7 Antivirus Premium Information Disclosure Vulnerability
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53, which stems from a failure to adequately authenticate user input sent to the K7Sentry device. A local attacker could exploit the...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02140)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53. A local attacker can exploit the vulnerability by performing a write operation to an arbitrary memory location with the help of a...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02144)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in K7 Antivirus Premium versions prior to 15.1.0.53. A local attacker can exploit this vulnerability by performing a write operation to an arbitrary memory location with the help of a...
K7 Antivirus Premium elevation of privilege vulnerability (CNVD-2018-02143)
K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions prior to K7 Antivirus Premium 15.1.0.53. A local attacker can exploit the vulnerability to gain privileges by sending a specific IOCTL...
CVE-2017-17429
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...