CVE-2017-17429 | BDVDB-2026-95295 Detail

Description#

In K7 Antivirus Premium before 15.1.0.53, user-controlled input to the K7Sentry device is not sufficiently authenticated: a local user with a LOW integrity process can access a raw hard disk by sending a specific IOCTL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-5th-December-2017

Exploit#

No public exploit known

History#

Version 12018-01-16Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.