PT-2017-14285 · Unknown · Watchdog Anti-Malware+1

Parvez Anwar + 1 · Published 2017-10-30 · Updated 2017-11-18 · CVE-2017-15921

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Watchdog Anti-Malware version 2.74.186.150 Online Security Pro version 2.74.186.150

Description The issue arises from a NULL pointer dereference vulnerability in the zam32.sys driver. This vulnerability is triggered when an operation is sent to the ioctl 0x80002010 endpoint, due to the lack of validation for the input buffer and its size, which can be NULL or 0.

Recommendations For Watchdog Anti-Malware version 2.74.186.150, consider disabling the zam32.sys driver until a patch is available. For Online Security Pro version 2.74.186.150, consider disabling the zam32.sys driver until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2017-15921

Affected Products

Online Security Pro

Watchdog Anti-Malware

References · 4

• 🔥 https://exploit-db.com/exploits/43058 · Exploit
• 🔥 http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-15921 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15921 · Vendor Advisory