CVE-2017-16556

Vulnerability

K7 Antivirus Premium before version 15.1.0.53 and other K7 security products allow local users to write to arbitrary memory locations through user-controlled input [1]. Affected products include K7 Anti-Virus Plus, K7 Anti-Virus Premium, K7 Internet Security, K7 Ultimate Security, K7 Total Security, K7 Total Security Plus, and K7 Endpoint Security [1].

Exploitation

An attacker with local user access can provide specially crafted input to the vulnerable software, triggering an arbitrary memory write. No additional authentication or user interaction beyond local access is required [1].

Impact

Successful exploitation grants the attacker the ability to write to arbitrary memory locations, potentially leading to privilege escalation, denial of service, or arbitrary code execution. Because the vulnerable software is a security product, exploitation could disable or bypass security controls [1].

Mitigation

Users should upgrade to the fixed versions listed in the advisory: K7 Anti-Virus Plus 15.1.0308, K7 Anti-Virus Premium 15.1.0314, K7 Internet Security 15.1.0297, K7 Ultimate Security 15.1.0324, K7 Total Security 15.1.0324, K7 Total Security Plus 16.0.0131, and K7 Endpoint 14.2.0137 [1].