CVE-2017-17700

Name of the Vulnerable Software and Affected Versions K7 Antivirus version 15.1.0309

Description The issue is related to a NULL pointer dereference in the K7Sentry.sys driver, specifically version 15.1.0.59, which is part of K7 Antivirus 15.1.0309. This can be triggered via a DeviceIoControl request with the code 0x950025a4.

Recommendations For K7 Antivirus version 15.1.0309, consider updating the K7Sentry.sys driver to a version that does not contain this issue, if available. As a temporary workaround, restricting access to the DeviceIoControl request with the code 0x950025a4 may help minimize the risk of exploitation.