Medium severity · published Jun 21, 2019
CVE-2018-15735
An issue was discovered in STOPzilla AntiMalware 6.5.2.59
5.5
CVSS
0.4%
EPSS
No
On KEV
Description
An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x8000206F.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antimalware · Stopzilla
6.5.2.59 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-15735
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-15735
Exploit
https://www.greyhathacker.net
Exploit
https://www.greyhathacker.net/?p=1025
More from Antimalware
5.5
CVE-2018-15738
An issue was discovered in STOPzilla AntiMalware 6.5.2.59
5.5
CVE-2018-15734
An issue was discovered in STOPzilla AntiMalware 6.5.2.59
5.5
CVE-2018-15733
An issue was discovered in STOPzilla AntiMalware 6.5.2.59
5.5
CVE-2018-15732
An issue was discovered in STOPzilla AntiMalware 6.5.2.59
5.5
CVE-2018-15731
An issue was discovered in STOPzilla AntiMalware 6.5.2.59