CVE-2017-14961
HighSummary
The ntguard.sys driver in IKARUS anti.virus version 2.16.7 contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x8300000c.
Risk Assessment
This vulnerability may lead to unauthorized memory writes, potentially resulting in system takeover or the introduction of malicious software.
Recommendation
It is recommended to update IKARUS anti.virus to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in IKARUS anti.virus 2.16.7
See all- CVE-2017-17804High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000084, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17797High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000058, allowing local users to cause a denial of service (BSOD) or potentially unspecified other impacts.
- CVE-2017-17795High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact due to not validating input values from IOCtl 0x83000088.
- CVE-2017-15643High
An active network attacker (MiTM) can achieve remote code execution on a machine running IKARUS Anti Virus 2.16.7. The attacker exploits cleartext HTTP updates and CRC32 for file verification.
Original NVD description (English source)
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c.