CVE-2017-18019: K7 Computing & Defenx – LPE

CVE: CVE-2017-18019
Reported by: Kyriakos Economou (@kyREcon)

Details
Multiple security products for Windows, of K7 Computing and Defenx, that share the same AV Engine SDK, are vulnerable to a local privilege escalation vulnerability

References
Nettitude – Exploitation Write-Up  (PDF)

 

All Rights R3v3rs3d