CVE-2017-16555

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.0HIGH
EPSS
0.1%
top 84.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
K7computing AntivirusK7computing EndpointK7computing Internet Security+2 more
Timeline
PublishedJan 16
Latest updateMay 13

Description

K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.0 | Impact: 5.9

Affected Packages5 packages

▶NVDk7computing/antivirus< 15.1.0.53+1
▶NVDk7computing/endpoint< 14.2.0137
▶NVDk7computing/total_security< 15.1.0324+1

🔴Vulnerability Details

2
GHSA
GHSA-wrvr-mg5w-x3vv: K7 Antivirus Premium before 15↗2022-05-13
▶
CVEList
CVE-2017-16555: K7 Antivirus Premium before 15↗2018-01-16
▶
CVE-2017-16555 (HIGH CVSS 7) | K7 Antivirus Premium before 15.1.0. | cvebase.io