IKARUS anti.virus and its 9 exploitable kernel vulnerabilities

Here is a list of the 9 kernel vulnerabilities I discovered over a month ago in an antivirus product called IKARUS anti.virus which has finally been fixed. Most of the vulnerabilities were due to the inputted output buffer address (Irp->UserBuffer) being saved on the stack which is later used without being validated when using as … Continue reading IKARUS anti.virus and its 9 exploitable kernel vulnerabilities