PT-2017-15004

CVE-2017-17798

·

Published

2017-12-20

·

Updated

2018-01-08

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions TG Soft Vir.IT eXplorer Lite version 8.5.42
Description The issue concerns a driver file, specifically VIRAGTLT.SYS, which does not validate input values from IOCtl 0x8273A0A0. This can lead to a denial of service, resulting in a Blue Screen of Death (BSOD), or potentially have other unspecified impacts.
Recommendations For TG Soft Vir.IT eXplorer Lite version 8.5.42, consider disabling the VIRAGTLT.SYS driver file as a temporary workaround to minimize the risk of exploitation. Restrict access to IOCtl 0x8273A0A0 to prevent potential abuse. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾