CVE-2017-16554
High
Description
K7 Antivirus Premium before 15.1.0.53 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a specific set of IOCTL calls.
SeverityHigh
CVSS7.8
Exploit probability—
ProductK7computing Antivirus
PublishedJan 16, 2018
First seenJan 16, 2018
How to fix
Update
- k7computing antivirus15.1.0.53, 15.1.0308 or later
- k7computing endpoint14.2.0137 or later
- k7computing internet_security15.1.0297 or later
- k7computing total_security15.1.0324, 16.0.0131 or later
- k7computing ultimate_security15.1.0324 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing antivirus | v < 15.1.0.53, v < 15.1.0308 | 15.1.0.53, 15.1.0308 |
| k7computing endpoint | v < 14.2.0137 | 14.2.0137 |
| k7computing internet_security | v < 15.1.0297 | 15.1.0297 |
| k7computing total_security | v < 15.1.0324, v < 16.0.0131 | 15.1.0324, 16.0.0131 |
| k7computing ultimate_security | v < 15.1.0324 | 15.1.0324 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.