PT-2017-13781 · Ikarus · Ikarus Anti.Virus

Publicado 2017-11-15 · Atualizado 2017-12-05 · CVE-2017-14961

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.7

Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability occurs due to the lack of validation of input values from the IOCtl 0x8300000c.

Recommendations For IKARUS anti.virus version 2.16.7, consider updating to a newer version that addresses this issue, as the current version does not validate input values from IOCtl 0x8300000c, leading to an Arbitrary Write vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-14961

Produtos afetados

Ikarus Anti.Virus

Referências · 6

• 🔥 https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html · Exploit
• 🔥 https://exploit-db.com/exploits/43139 · Exploit
• https://ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002 · Aviso do Fabricante
• http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html · Nota
• https://osv.dev/vulnerability/CVE-2017-14961 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14961 · Nota de Segurança