CVE-2017-16948
HighSummary
A vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\.\Viragtlt.
Risk Assessment
An attacker with local access can cause a system or application crash, leading to disruption of antivirus protection services and potentially enabling further attacks.
Recommendation
It is recommended to update TG Soft Vir.IT eXplorer Lite to the latest version that fixes this vulnerability and restrict local system access to trusted users only.
Other vulnerabilities in TG Soft Vir.IT eXplorer Lite 8.5.42
See all- CVE-2017-17803High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x82736068.
- CVE-2017-17802High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E080, which may lead to a denial of service (BSOD) or other unspecified impacts.
- CVE-2017-17801High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E060, allowing local users to cause a denial of service (BSOD) or potentially other unspecified impacts.
- CVE-2017-17800High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x8273A0A0.
- CVE-2017-17799High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x82730068, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17798High
In TG Soft Vir.IT eXplorer Lite version 8.5.42, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273A0A0, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17796High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x827300A4, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17475High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
- CVE-2017-17474High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
- CVE-2017-17473High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
Original NVD description (English source)
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730008 DeviceIoControl request to \\.\Viragtlt.