CVE-2017-17466
HighSummary
A vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to gain privileges or cause a denial of service via an arbitrary write operation triggered by a DeviceIoControl request of 0x82730088 to the \\.\Viragtlt device.
Risk Assessment
A local attacker can escalate privileges or crash the application, posing a risk to data confidentiality and availability.
Recommendation
Update TG Soft Vir.IT eXplorer Lite to the latest version that fixes this vulnerability. In the meantime, restrict local access to the system for untrusted users.
Other vulnerabilities in TG Soft Vir.IT eXplorer Lite 8.5.42
See all- CVE-2017-17803High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x82736068.
- CVE-2017-17802High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E080, which may lead to a denial of service (BSOD) or other unspecified impacts.
- CVE-2017-17801High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E060, allowing local users to cause a denial of service (BSOD) or potentially other unspecified impacts.
- CVE-2017-17800High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x8273A0A0.
- CVE-2017-17799High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x82730068, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17798High
In TG Soft Vir.IT eXplorer Lite version 8.5.42, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273A0A0, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17796High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x827300A4, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17475High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
- CVE-2017-17474High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
- CVE-2017-17473High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
Original NVD description (English source)
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl request of 0x82730088.