CVE-2017-14969

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000084, a related issue to CVE-2017-17114...

CVE-2017-14963

CVE-2017-14963 affects IKARUS anti.virus: ntguard.sys driver with an Arbitrary Write vulnerability due to not validating inputs to IOCTL 0x83000058. Versions before 2.16.18 are vulnerable. Exploitation would be local (per CVSS) with low attack complexity; impact items include confidentiality, int...

CVE-2017-14962

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write vulnerability because of not validating input values from IOCtl 0x83000058, a related issue to CVE-2017-17112...

Threat Outbreak Alert RuleID31584: Email Messages Distributing Malicious Software on December 20, 2017

Medium Alert ID: 56314 First Published: 2017 December 20 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31584 may contain the following files: Name |...

Threat Outbreak Alert RuleID31685: Email Messages Distributing Malicious Software on December 20, 2017

Medium Alert ID: 56313 First Published: 2017 December 20 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31685 may contain the following files: Name |...

Threat Outbreak Alert RuleID31681: Email Messages Distributing Malicious Software on December 20, 2017

Medium Alert ID: 56315 First Published: 2017 December 20 17:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31681 may contain the following files: Name |...

CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

CVE-2017-17804

CVE-2017-17804 affects IKARUS anti.virus 2.16.20. The vulnerability is in the ntguard.SYS driver, which does not validate input from IOCTL 0x83000084, allowing local users to cause a denial of service (BSOD) and potentially other impact. Multiple sources (NVD entry, OpenVAS NASL, and CNVD entries...

CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

IKARUS Anti-Virus Denial of Service Vulnerability (CNVD-2018-01339)

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000058. A local user can exploit this vulnerability to cause ...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37941)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A security vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.65, which originates when the program fails to...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37936)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.42, which originates when the program fai...

IKARUS Anti-Virus Denial of Service Vulnerability (CNVD-2018-01338)

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000088. A local user can exploit this vulnerability to cause ...

IKARUS Anti-Virus Denial of Service Vulnerability

IKARUS anti.virus is an antivirus program from Austria. A denial of service vulnerability exists in IKARUS Anti-Virus 2.16.20. The vulnerability arises because the driver file ntguard.SYS fails to validate an input value from IOCtl 0x83000084. A local user can exploit this vulnerability to cause ...

Threat Outbreak Alert RuleID31669: Email Messages Distributing Malicious Software on December 19, 2017

Medium Alert ID: 56297 First Published: 2017 December 19 15:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31669 may contain the following files: Name |...

GCHQ Found -- and Disclosed -- a Windows 10 Vulnerability

Now this is good news. The UK's National Cyber Security Centre NCSC -- part of GCHQ -- found a serious vulnerability in Windows Defender their anti-virus component. Instead of keeping it secret and all of us vulnerable, it alerted Microsoft. I'd like believe the US does this, too...

Virus Bulletin Publication And Presentation

Virus Bulletin conference is a well regarded intimate technical conference focused on malware research. It provides a good balance between listening to technical talks and spending time exchanging experiences with colleagues from different companies; all working on the same task of making our...

Threat Outbreak Alert RuleID31625: Email Messages Distributing Malicious Software on December 18, 2017

Medium Alert ID: 56287 First Published: 2017 December 18 18:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31625 may contain the following files: Name |...

Threat Outbreak Alert RuleID31668: Email Messages Distributing Malicious Software on December 18, 2017

Medium Alert ID: 56295 First Published: 2017 December 18 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31668 may contain the following files: Name |...

Threat Outbreak Alert RuleID31658: Email Messages Distributing Malicious Software on December 18, 2017

Medium Alert ID: 56293 First Published: 2017 December 18 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31658 may contain the following files: Name |...