Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2017-15921

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.

  • Published: Oct 30, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-15921
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
watchdogdevelopment / anti-malware 2.74.186.150 2.74.186.150.x
watchdogdevelopment / online_security_pro 2.74.186.150 2.74.186.150.x