PT-2017-13781 · Ikarus · Ikarus Anti.Virus

Published 2017-11-15 · Updated 2017-12-05 · CVE-2017-14961

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IKARUS anti.virus version 2.16.7

Description The issue arises from the ntguard.sys driver in IKARUS anti.virus, which contains an Arbitrary Write vulnerability. This vulnerability occurs due to the lack of validation of input values from the IOCtl 0x8300000c.

Recommendations For IKARUS anti.virus version 2.16.7, consider updating to a newer version that addresses this issue, as the current version does not validate input values from IOCtl 0x8300000c, leading to an Arbitrary Write vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-14961

Affected Products

Ikarus Anti.Virus

References · 6

• 🔥 https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html · Exploit
• 🔥 https://exploit-db.com/exploits/43139 · Exploit
• https://ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-14961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14961 · Security Note
• http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html · Note