CVE-2017-17472
HighSummary
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or potentially other unspecified impacts by sending a DeviceIoControl request with code 0x82730030 to the \.\Viragtlt device.
Risk Assessment
The risk for the organization is the possibility of a Denial of Service (DoS) attack by a local user, which can lead to system disruption and loss of productivity.
Recommendation
It is recommended to update TG Soft Vir.IT eXplorer Lite to the latest version that fixes this vulnerability, and to restrict local system access to trusted users only.
Other vulnerabilities in TG Soft Vir.IT eXplorer Lite 8.5.42
See all- CVE-2017-17803High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x82736068.
- CVE-2017-17802High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E080, which may lead to a denial of service (BSOD) or other unspecified impacts.
- CVE-2017-17801High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273E060, allowing local users to cause a denial of service (BSOD) or potentially other unspecified impacts.
- CVE-2017-17800High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service (BSOD) due to not validating input values from IOCtl 0x8273A0A0.
- CVE-2017-17799High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x82730068, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17798High
In TG Soft Vir.IT eXplorer Lite version 8.5.42, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x8273A0A0, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17796High
In TG Soft Vir.IT eXplorer Lite version 8.5.65, the driver file (VIRAGTLT.SYS) does not validate input values from IOCtl 0x827300A4, allowing local users to cause a denial of service (BSOD) or possibly other unspecified impacts.
- CVE-2017-17475High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82736068 to the \.\Viragtlt device.
- CVE-2017-17474High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a BSOD (Blue Screen of Death) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730070 to the \.\Viragtlt device.
- CVE-2017-17473High
The vulnerability in TG Soft Vir.IT eXplorer Lite version 8.5.42 allows local users to cause a Blue Screen of Death (BSOD) or possibly have other unspecified impacts by sending a DeviceIoControl request with code 0x82730050 to the \.\Viragtlt device.
Original NVD description (English source)
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceIoControl request of 0x82730030.