CVE-2017-17429: Input Validation
First published: Tue Jan 16 2018(Updated: )
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| K7computing Antivirus | <15.1.0.53 | |
| K7computing Antivirus | <15.1.0308 | |
| K7computing Endpoint | <14.2.0137 | |
| K7computing Internet Security | <15.1.0297 | |
| K7computing Total Security | <15.1.0324 | |
| K7computing Total Security | <16.0.0131 | |
| K7computing Ultimate Security | <15.1.0324 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
