PT-2023-25132 · Microsoft+1 · Windows+1

Published 2023-07-21 · Updated 2023-07-31 · CVE-2023-35077

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti AntiVirus Product versions prior to 7.9.1.285

Description An out-of-bounds write vulnerability on Windows operating systems causes the Ivanti AntiVirus Product to crash.

Recommendations Update to Ivanti AV Product version 7.9.1.285 or above.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-35077

Affected Products

Ivanti Antivirus Product

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-35077 · Security Note
• https://forums.ivanti.com/s/article/SA-2023-07-19-CVE-2023-35077 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35077 · Vendor Advisory
• https://t.me/cvenotify/54910 · Telegram Post