CVE-2018-9333
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD
Description
K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.exe.
Affected (4)
Products: K7computing: Antivrius, Enterprise Security, Total Security, Ultimate Security
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 16.0.0001 | |
| Before 14.2.0001 | |
| Before 16.0.0001 | |
| Before 16.0.0001 |
Related CWEs
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
References (6)
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
Source: cve@mitre.org
Vendor Advisory
https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-6th-January-2021
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.