K7Computing Antivirus vulnerabilities

38 known vulnerabilities affecting k7computing/antivirus.

Total CVEs
38
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL6HIGH22MEDIUM10

Vulnerabilities

Page 1 of 2
CVE-2017-16549HIGHCVSS 7.8fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16549 [HIGH] CWE-787 CVE-2017-16549: K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
nvd
CVE-2017-16550HIGHCVSS 7.8fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16550 [HIGH] CVE-2017-16550: K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
nvd
CVE-2017-16551HIGHCVSS 7.0fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16551 [HIGH] CWE-787 CVE-2017-16551: K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IO K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
nvd
CVE-2017-16554HIGHCVSS 7.8fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16554 [HIGH] CWE-787 CVE-2017-16554: K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
nvd
CVE-2017-16557HIGHCVSS 7.0fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16557 [HIGH] CWE-787 CVE-2017-16557: K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IO K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
nvd
CVE-2017-16553HIGHCVSS 7.0fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16553 [HIGH] CWE-787 CVE-2017-16553: K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IO K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
nvd
CVE-2017-16552HIGHCVSS 7.8fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16552 [HIGH] CWE-787 CVE-2017-16552: K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
nvd
CVE-2017-16555HIGHCVSS 7.0fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16555 [HIGH] CWE-787 CVE-2017-16555: K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IO K7 Antivirus Premium before 15.1.0.53 allows local users to gain privileges by sending a specific IOCTL after setting the memory in a particular way.
nvd
CVE-2017-17429MEDIUMCVSS 5.5fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-17429 [MEDIUM] CWE-20 CVE-2017-17429: In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not suffic In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
nvd
CVE-2017-16556MEDIUMCVSS 5.5fixed in 15.1.0.53fixed in 15.1.03082018-01-16
CVE-2017-16556 [MEDIUM] CWE-20 CVE-2017-16556: In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to In K7 Antivirus Premium before 15.1.0.53, user-controlled input can be used to allow local users to write to arbitrary memory locations.
nvd
CVE-2018-5217HIGHCVSS 7.8v15.1.03062018-01-04
CVE-2018-5217 [HIGH] CWE-20 CVE-2018-5217: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of se In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002578.
nvd
CVE-2018-5219HIGHCVSS 7.8v15.1.03062018-01-04
CVE-2018-5219 [HIGH] CWE-20 CVE-2018-5219: In K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 Antivirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002168.
nvd
CVE-2018-5220HIGHCVSS 7.8v15.1.03062018-01-04
CVE-2018-5220 [HIGH] CWE-20 CVE-2018-5220: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of se In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x95002610.
nvd
CVE-2018-5218HIGHCVSS 7.8v15.1.03062018-01-04
CVE-2018-5218 [HIGH] CWE-20 CVE-2018-5218: In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of se In K7 Antivirus 15.1.0306, the driver file (K7Sentry.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x950025b0.
nvd
CVE-2018-5084HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5084 [HIGH] CWE-20 CVE-2018-5084: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300212C.
nvd
CVE-2018-5082HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5082 [HIGH] CWE-20 CVE-2018-5082: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002128.
nvd
CVE-2018-5087HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5087 [HIGH] CWE-20 CVE-2018-5087: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002100.
nvd
CVE-2018-5086HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5086 [HIGH] CWE-20 CVE-2018-5086: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215F.
nvd
CVE-2018-5083HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5083 [HIGH] CWE-20 CVE-2018-5083: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215B.
nvd
CVE-2018-5079HIGHCVSS 7.8v15.1.03062018-01-03
CVE-2018-5079 [HIGH] CWE-20 CVE-2018-5079: In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of se In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002130.
nvd