What’s Vulnerable › Vulnerabilities
CVE-2017-15920
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 7.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2017-10-30 · updated 2026-06-17
- Weakness: CWE-476
Description
In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input buffer being NULL or the input buffer size being 0 as they are not validated.
Affected products
- Watchdogdevelopment Anti-Malware: 2.74.186.150
- Watchdogdevelopment Online Security Pro: 2.74.186.150
References
- http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html
- https://www.exploit-db.com/exploits/43058/
- http://packetstormsecurity.com/files/144786/Watchdog-Development-Anti-Malware-Online-Security-Pro-NULL-Pointer-Dereference.html
- https://www.exploit-db.com/exploits/43058/
Get alerted when CVE-2017-15920 or the next vulnerability affects your stack