CVEvulnerability
CVE-2017-15921
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-476
Description
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.
Affected configurations
• watchdogdevelopment anti-malware 2.74.186.150
• watchdogdevelopment online security pro 2.74.186.150
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/43058/ Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html Exploit, Issue Tracking, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/43058/ Exploit, Issue Tracking, Third Party Advisory, VDB Entry