Vulnerability · Published Mar 6, 2023 · Assigned by VulDB

CVE-2023-1188FabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of service

Low 3.3

In plain English

A low-severity security flaw in Webcam for Remote Desktop from FabulaTech. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.4%top 69.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-222360.

Affected products (as reported)

Vendor	Product	Versions
FabulaTech	Webcam for Remote Desktop	2.8.42

Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References

https://vuldb.com/?id.222360 vdb-entry, technical-description
https://vuldb.com/?ctiid.222360 signature, permissions-required
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1188 related
https://drive.google.com/file/d/1_gVQtfbpywhh8Z6g4Y03Qg7UT3Aobz2e/view?usp=sharing exploit