CVE-2017-17429
Medium
Description
In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.
SeverityMedium
CVSS5.5
Exploit probability—
ProductK7computing Antivirus
PublishedJan 16, 2018
First seenJan 16, 2018
How to fix
Update
- k7computing antivirus15.1.0.53, 15.1.0308 or later
- k7computing endpoint14.2.0137 or later
- k7computing internet_security15.1.0297 or later
- k7computing total_security15.1.0324, 16.0.0131 or later
- k7computing ultimate_security15.1.0324 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| k7computing antivirus | v < 15.1.0.53, v < 15.1.0308 | 15.1.0.53, 15.1.0308 |
| k7computing endpoint | v < 14.2.0137 | 14.2.0137 |
| k7computing internet_security | v < 15.1.0297 | 15.1.0297 |
| k7computing total_security | v < 15.1.0324, v < 16.0.0131 | 15.1.0324, 16.0.0131 |
| k7computing ultimate_security | v < 15.1.0324 | 15.1.0324 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.