CVE-2018-15735

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F.

CVSS v3.0

5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0.45% chance of exploitation in the next 30 days, 37th percentile

Published

2019-06-21

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.greyhathacker.net

References

• CVE Record
• NVD entry

Related

• CVE-2018-15734
• CVE-2018-15736
• CVE-2018-15733
• CVE-2018-15737
• CVE-2018-15732
• CVE-2018-15740