CVE-2017-17804
HighSummary
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000084, allowing local users to cause a denial of service (BSOD) or possibly have unspecified other impact.
Risk Assessment
The lack of input validation may lead to serious availability issues, affecting the organization's operational continuity.
Recommendation
It is recommended to update IKARUS anti.virus to the latest version to mitigate this vulnerability and implement additional security measures to monitor and restrict local user access.
Other vulnerabilities in IKARUS anti.virus 2.16.20
See all- CVE-2017-17797High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) does not validate input values from IOCtl 0x83000058, allowing local users to cause a denial of service (BSOD) or potentially unspecified other impacts.
- CVE-2017-17795High
In IKARUS anti.virus version 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact due to not validating input values from IOCtl 0x83000088.
- CVE-2017-14961High
The ntguard.sys driver in IKARUS anti.virus version 2.16.7 contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x8300000c.
- CVE-2017-15643High
An active network attacker (MiTM) can achieve remote code execution on a machine running IKARUS Anti Virus 2.16.7. The attacker exploits cleartext HTTP updates and CRC32 for file verification.
Original NVD description (English source)
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084.