Privilege Escalation in K7 Antivirus Premium by K7 Computing
CVE-2017-16550

7.8HIGH

Key Information:

Vendor

K7computing

Status
Antivirus
Internet Security
Ultimate Security
Endpoint
Vendor
CVE Published:
16 January 2018

What is CVE-2017-16550?

K7 Antivirus Premium, prior to version 15.1.0.53, is susceptible to a vulnerability that allows local users to execute arbitrary write operations on memory. This can be exploited through specific IOCTL calls, enabling an attacker to gain elevated privileges within the system. This poses a significant security risk, as unauthorized access to memory can lead to the execution of malicious code or unauthorized actions on the affected system.

References

https://support.k7computing.com/index.php?/selfhelp/view-...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2017-16550 : Privilege Escalation in K7 Antivirus Premium by K7 Computing