PT-2017-14720
CVE-2017-17114
·
تاريخ النشر
2017-12-04
·
تاريخ التحديث
2017-12-21
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IKARUS anti.virus version 2.16.15
Description
The issue is related to a Memory Corruption problem in the ntguard.sys and ntguard x64.sys drivers, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x83000084.
Recommendations
For IKARUS anti.virus version 2.16.15, consider updating the ntguard.sys and ntguard x64.sys drivers to a version that does not contain this issue, if available. As a temporary workaround, restricting access to the DeviceIoControl request 0x83000084 may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾