CVE-2017-17700
CriticalSummary
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with value 0x950025a4.
Risk Assessment
An attacker could exploit this vulnerability to cause system crashes or execute unauthorized code, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update K7 Antivirus to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Other vulnerabilities in K7Sentry.sys 15.1.0.59
See all- CVE-2014-9643High
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before version 14.2.0.253 allows local users to write to arbitrary memory locations, potentially gaining privileges.
- CVE-2017-17699Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with the value 0x950025ac.
- CVE-2017-17465Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows for a NULL pointer dereference via a DeviceIoControl request with code 0x95002574.
- CVE-2017-17464Critical
K7 Antivirus 15.1.0309 has a vulnerability in K7Sentry.sys 15.1.0.59 that allows NULL pointer dereference via a DeviceIoControl request with code 0x95002570.
- CVE-2018-8044High
The vulnerability in K7Antivirus Premium 15.1.0.53 is caused by incorrect access control in the K7Sentry.sys driver. It allows a local attacker to execute a process with elevated privileges.
Original NVD description (English source)
K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x950025a4 DeviceIoControl request.