CVE-2017-15921

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets…

published October 30, 2017

CVSS
—
EPSS
8%
Percentile
94.5
In the wild
Unconfirmed
What it is

In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07575 · 94.5th percentile
Published
2017-10-30T15:00Z
EPSS history
Timeline
  • 30 OCT 15:00Z
    In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets…
    cvelistv5