CVE-2017-17795
HighSummary
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact due to not validating input values from IOCtl 0x83000088.
Risk Assessment
This vulnerability may lead to significant disruptions in system operation, potentially affecting the availability of services within the organization.
Recommendation
It is recommended to update IKARUS anti.virus to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IKARUS anti.virus 2.16.20
See all- CVE-2017-17804High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000084, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17797High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000058, allowing local users to cause a denial of service (BSOD) or potentially unspecified other impacts.
- CVE-2017-14961High
The ntguard.sys driver in IKARUS anti.virus version 2.16.7 contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x8300000c.
- CVE-2017-15643High
An active network attacker (MiTM) can achieve remote code execution on a machine running IKARUS Anti Virus 2.16.7. The attacker exploits cleartext HTTP updates and CRC32 for file verification.
Original NVD description (English source)
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088.