Back to Database
Status published
High
CVE-2017-14961
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary...
Vulnerability Description
In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-14961
Credits & Attribution
No credits recorded in the NVD database.
References
- http://packetstormsecurity.com/files/144955/IKARUS-AntiVirus-2.16.7-Privilege-Escalation.html
- https://theevilbit.blogspot.co.uk/2017/11/turning-cve-2017-14961-ikarus-antivirus.html
- https://www.exploit-db.com/exploits/43139/
- https://www.ikarussecurity.com/about-ikarus/security-blog/vulnerability-in-windows-antivirus-products-ik-sa-2017-0002/
More from ikarussecurity
View All →CVE-2017-17804
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local...
High
7.8
CVE-2017-17797
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local...
High
7.8
CVE-2017-17795
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local...
High
7.8
CVE-2017-17114
ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a...
High
7.8
CVE-2017-17113
ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer...
Medium
5.5
Affected Vendor
ikarussecurity
View all reports →Affected Software
anti.virus
Vulnerable Versions:
2.16.7
Timeline
Official Publish:
November 15th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.