← back
CVE-2017-15921

CVE-2017-15921

EPSS 7.6%
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.htmlunverifiedcve_referencewww.exploit-db.com/exploits/43058/unverifiedexploitdbwww.exploit-db.com/exploits/43058unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.htmlhttps://www.exploit-db.com/exploits/43058/