PT-2019-9168
CVE-2018-15738
·
Published
2019-07-09
·
Updated
2019-07-15
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
STOPzilla AntiMalware version 6.5.2.59
Description
An issue was discovered in the driver file szkg64.sys, which contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000205F.
Recommendations
For STOPzilla AntiMalware version 6.5.2.59, consider disabling the szkg64.sys driver file as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾