CVE-2017-17050
HighSummary
The vulnerability in TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.
Risk Assessment
An attacker with local access to the system can cause the antivirus software to crash, leading to a disruption of system protection and potentially enabling further attacks.
Recommendation
It is recommended to update TG Soft Vir.IT eXplorer Lite to the latest version that includes a fix for the NULL pointer dereference vulnerability.
Other vulnerabilities in TG Soft Vir.IT eXplorer Lite 8.5.42
See all- CVE-2017-17803High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x82736068.
- CVE-2017-17802High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E080, which may lead to a denial of service (BSOD) or other unspecified impacts.
- CVE-2017-17801High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E060, allowing local users to cause a denial of service (BSOD) or potentially other unspecified impacts.
- CVE-2017-17800High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x8273A0A0.
- CVE-2017-17799High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x82730068, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17798High
In TG Soft Vir.IT eXplorer Lite version 8.5.42, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273A0A0, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17796High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x827300A4, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17475High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
- CVE-2017-17474High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
- CVE-2017-17473High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
Original NVD description (English source)
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a NULL value in a 0x82730020 DeviceIoControl request to \\.\Viragtlt.