Vulnerability · Published Mar 26, 2023 · Assigned by VulDB
CVE-2023-1645IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service
Medium 5.5
In plain English
A medium-severity security flaw in Malware Fighter from IObit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Official description
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-224025 was assigned to this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IObit | Malware Fighter | 9.4.0.776 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://vuldb.com/?id.224025 vdb-entry, technical-description
- https://vuldb.com/?ctiid.224025 signature, permissions-required
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1645 related
- https://drive.google.com/file/d/1RmFSm1sQWwQXPXjkeZtgf8q51hGD8tTf/view exploit