CVE-2017-17429: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL...

PT-2018-6287

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6289

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6293

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

PT-2018-6295

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to write to arbitrary memory locations using user-controlled input. Recommendations: For versions prior to 15.1.0.53, update to version 15.1.0.53 or...

PT-2018-6292

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6294

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6296

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way. Recommendations: For versions prior to 15.1.0.53, update t...

PT-2018-6512

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue concerns insufficient authentication of user-controlled input to the K7Sentry device, allowing a local user with a LOW integrity process to access a raw hard disk by...

CVE-2017-16554: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16550: Undefined Security Weakness

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

CVE-2017-16551: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16556: Improper Input Validation

In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations...

CVE-2017-16555: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16553: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way...

CVE-2017-16552: Out-of-bounds Write

K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls...

PT-2018-6291

Name of the Vulnerable Software and Affected Versions: K7 Antivirus Premium versions prior to 15.1.0.53 Description: The issue allows local users to gain privileges by writing to arbitrary memory locations via a specific set of IOCTL calls. Recommendations: For versions prior to 15.1.0.53, update...

K7 Total Security Arbitrary Content Read Vulnerability

K7 Total Security is a network security protection device from K7 Computing India. A security vulnerability exists in versions prior to K7 Total Security 15.1.0.305 that stems from the program failing to adequately filter user input. An attacker can exploit the vulnerability to read arbitrary...

K7 AntiVirus Denial of Service Vulnerability (CNVD-2018-01134)

K7 AntiVirus is home user friendly virus removal software that protects computers from viruses, Trojans, malware and spyware threats. A denial of service vulnerability exists in the driver file K7Sentry.sys in K7 AntiVirus 15.1.0306. The vulnerability arises due to an unverified input value from...

K7 AntiVirus Denial of Service Vulnerability (CNVD-2018-01137)

K7 AntiVirus is home user friendly virus removal software that protects computers from viruses, Trojans, malware and spyware threats. A denial of service vulnerability exists in the driver file K7Sentry.sys in K7 AntiVirus 15.1.0306. The vulnerability arises due to an unverified input value from...