CVE-2018-5086: Input Validation
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215F.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5086?
CVE-2018-5086 has been classified as having a high severity level due to its potential to cause denial of service.
How do I fix CVE-2018-5086?
To fix CVE-2018-5086, users should update K7 AntiVirus to a version higher than 15.1.0306 where the vulnerability is addressed.
Who is affected by CVE-2018-5086?
CVE-2018-5086 affects local users of K7 AntiVirus version 15.1.0306 due to improper input validation in the driver file.
What type of impact does CVE-2018-5086 have?
CVE-2018-5086 can lead to a denial of service, causing the system to crash with a BSOD.
Is CVE-2018-5086 exploitable remotely?
CVE-2018-5086 is not remotely exploitable and requires local access to the affected system.