CVE-2017-6007: sophos hitmanpro
CVSS: 5.5v3.0MediumModified
Published 13-09-2017Last modified 05-08-2024
Vulnerability summary
CVE-2017-6007 is a medium (CVSS 5.5) vulnerability in sophos hitmanpro. EPSS estimates a 0.40% chance of exploitation in the next 30 days, higher than 32.9% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
5.5/10
010
Medium · v3.0 (NVD)EPSS score
0.40%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Timeline
- 13-09-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean) allows local users to crash the OS via a malformed IOCTL call.
CVSS metrics
2 scores · 1 source · 2 versionsMedium 5.5Preferred score · NVD (NIST)
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HSourcesSingle source
Medium 4.9Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
0.40%
Chance of exploitation in the next 30 days
Percentile
33%
Versus all other CVEs
30-day change
0.00 pp
From 0.40% on 19-09-2026
19-09-202619-10-2026
EPSS score0.40%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (trackwatch.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Sophos1 product
- hitmanpro≤ 3.7.20
1 vendor · 1 product
References
2 links- trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-7/X Refsource MISCExploitTechnical DescriptionThird Party Advisory