SUPERAntiSpyware Professional Trial Denial of Service Vulnerability (CNVD-2018-02916)

SUPERAntiSpyware Professional Trial is a suite of antivirus tools from US-based Support.com that are primarily designed to scan for spyware. A security vulnerability exists in the SASKUTIL.SYS driver file in SUPERAntiSpyware Professional Trial version 6.0.1254, which originates from the program's...

CVE-2018-6475

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

Input validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080...

CVE-2018-6474

CVE-2018-6474 affects SUPERAntiSpyware Professional Trial 6.0.1254 via the SASKUTIL.SYS driver. The vulnerability arises from not validating input values for IOCTL 0x9C402148, enabling local attackers to trigger a denial of service (BSOD) and potentially other impact. Affected component: SASKUTIL...

CVE-2018-6475

CVE-2018-6475 affects SUPERAntiSpyware Professional Trial 6.0.1254. The issue is a DLL hijacking vulnerability in SUPERAntiSpyware.exe that enables Elevation of Privileges. Root cause: DLL loading manipulation leads to privilege escalation. Impacted software is the SUPERAntiSpyware Professional T...

CVE-2018-6472

In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver is vulnerable due to input validation failure on IOCTL 0x9C40204c, enabling local users to trigger a denial of service (BSOD) and potentially other impact. This is supported by multiple sources (NVD, Red Hat CVE entry, CNVD,...

PT-2018-17569

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue is related to the driver file SASKUTIL.SYS, which does not validate input values from IOCtl 0x9C40204c. This can allow local users to cause a denial of service, resulti...

PT-2018-17568

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402078, allowing local users to cause a denial of service, potentially...

PT-2018-17571

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402148, allowing local users to cause a denial of service, potentially...

PT-2018-17570

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the driver file SASKUTIL.SYS, which fails to validate input values from IOCtl 0x9C402080, allowing local users to cause a denial of service, potentially...

PT-2018-17573

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue arises from the SASKUTIL.SYS driver in SUPERAntiSpyware Professional Trial, which allows privilege escalation to NT AUTHORITYSYSTEM. This is due to the driver not...

CVE-2018-6476: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating input values from IOCtl 0x9C402114 or 0x9C402124 or 0x9C40207c...

CVE-2018-6474: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402148...

CVE-2018-6473: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402080...

CVE-2018-6475: Untrusted Search Path

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Privileges...

CVE-2018-6472: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c...

PT-2018-17572

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional Trial version 6.0.1254 Description The issue allows DLL hijacking, which can lead to Escalation of Privileges. This occurs due to a flaw in SUPERAntiSpyware.exe. Recommendations For version 6.0.1254, consider...

CVE-2018-6471: Improper Input Validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078...