CVE-2017-17797
HighSummary
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000058, allowing local users to cause a denial of service (BSOD) or potentially unspecified other impacts.
Risk Assessment
The lack of input validation may lead to serious availability issues, affecting the organization's operational continuity.
Recommendation
It is recommended to update to the latest version of IKARUS anti.virus to mitigate the risks associated with this vulnerability.
Other vulnerabilities in IKARUS anti.virus 2.16.20
See all- CVE-2017-17804High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000084, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
- CVE-2017-17795High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact due to not validating input values from IOCtl 0x83000088.
- CVE-2017-14961High
The ntguard.sys driver in IKARUS anti.virus version 2.16.7 contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x8300000c.
- CVE-2017-15643High
An active network attacker (MiTM) can achieve remote code execution on a machine running IKARUS Anti Virus 2.16.7. The attacker exploits cleartext HTTP updates and CRC32 for file verification.
Original NVD description (English source)
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058.