PT-2017-14720

CVE-2017-17114

·

Publicado

2017-12-04

·

Atualizado

2017-12-21

Descrição por

CVSS 3.1
7.8
Alta
MétricasAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.15
Description The issue is related to a Memory Corruption problem in the ntguard.sys and ntguard x64.sys drivers, version 0.18780.0.0, which can be triggered via a specific DeviceIoControl request, 0x83000084.
Recommendations For IKARUS anti.virus version 2.16.15, consider updating the ntguard.sys and ntguard x64.sys drivers to a version that does not contain this issue, if available. As a temporary workaround, restricting access to the DeviceIoControl request 0x83000084 may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾