CVE-2018-15732

An issue was discovered in STOPzilla AntiMalware 6.5.2.59. The driver file szkg64.sys contains an Arbitrary Write vulnerability due to not validating the output buffer address value from IOCtl 0x80002063.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2019-06-21

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Antimalware (Stopzilla)

References

• https://www.greyhathacker.net
• https://www.greyhathacker.net/?p=1025