CVE-2017-17429 In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sendin...
MediumCVSS 5.5
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing antivirus | < 15.1.0.53 | 15.1.0.53 |
| k7computing antivirus | < 15.1.0308 | 15.1.0308 |
| k7computing endpoint | < 14.2.0137 | 14.2.0137 |
| k7computing internet security | < 15.1.0297 | 15.1.0297 |
| k7computing total security | < 15.1.0324 | 15.1.0324 |
| k7computing total security | < 16.0.0131 | 16.0.0131 |
| k7computing ultimate security | < 15.1.0324 | 15.1.0324 |
References
- support.k7computing.com vendor-advisory