high7.1Public exploit code
CVE-2017-18019
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read2017-10-23 · dos · windows
Impact
In K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled input can be used to compare an arbitrary memory address with a fixed value, which in turn can be used to read the contents of arbitrary memory. Similarly, the product crashes upon a \\.\K7Sentry DeviceIoControl call with an invalid kernel pointer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| K7computing | Total Security | before 15.1.0.305 |