CVE-2018-8725
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.01.00.53 by K7Computing, specifically in the K7TSMngr.exe process. This flaw allows a local attacker to execute arbitrary code.
Risk Assessment
A local attacker could gain full control of the system, leading to data theft, malware installation, or service disruption.
Recommendation
Immediately update K7AntiVirus Premium to the latest version that addresses this vulnerability.
Other vulnerabilities in K7AntiVirus Premium
See all- CVE-2018-9333High
A buffer overflow vulnerability has been discovered in K7AntiVirus Premium 15.1.0.53 by K7Computing Pvt Ltd, affecting the K7TSMngr.exe process. This vulnerability allows a local attacker to execute arbitrary code on the system.
- CVE-2018-9332High
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is caused by incorrect access control. It allows a local attacker to gain elevated privileges on the system.
- CVE-2018-8724High
The vulnerability in K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is caused by incorrect access control in the K7TSMngr.exe component. It allows a local attacker to escalate privileges on the system.
Original NVD description (English source)
K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.