K7 Antivirus Premium/Total Security/Ultimate Security Inter-Process Communication K7TSHlpr.dll privileges management

Summaryinfo

A vulnerability has been found in K7 Antivirus Premium, Total Security and Ultimate Security up to 16.0.xxx and classified as critical. Impacted is an unknown function in the library K7TSHlpr.dll of the component Inter-Process Communication. This manipulation causes privileges management. The identification of this vulnerability is CVE-2019-16897. The attack can only be executed locally. There is no exploit available.

Detailsinfo

A vulnerability was found in K7 Antivirus Premium, Total Security and Ultimate Security up to 16.0.xxx (Anti-Malware Software). It has been declared as critical. Affected by this vulnerability is an unknown part in the library K7TSHlpr.dll of the component Inter-Process Communication. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE definition for the vulnerability is CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120, the module K7TSHlpr.dll improperly validates the administrative privileges of the user, allowing arbitrary registry writes in the K7AVOptn.dll module to facilitate escalation of privileges via inter-process communication with a service process.

The weakness was shared 10/28/2019. This vulnerability is known as CVE-2019-16897 since 09/25/2019. Attacking locally is a requirement. A single authentication is necessary for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Anti-Malware Software

Vendor

• K7

Name

• Antivirus Premium
• Total Security
• Ultimate Security

Version

• 16.0.xxx

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion