Vulnerability · Published Feb 13, 2024 · Assigned by Fluid Attacks
CVE-2024-1096Twister Antivirus v8.17 - Denial of Service
Medium 5.5
In plain English
A medium-severity null pointer dereference in Twister Antivirus from Filseclab. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 90.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Twister Antivirus v8.17 is vulnerable to a Denial of Service vulnerability by triggering the 0x80112067, 0x801120CB 0x801120CC 0x80112044, 0x8011204B, 0x8011204F, 0x80112057, 0x8011205B, 0x8011205F, 0x80112063, 0x8011206F, 0x80112073, 0x80112077, 0x80112078, 0x8011207C and 0x80112080 IOCTL codes of the fildds.sys driver.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Filseclab | Twister Antivirus | 8.17 |
Weakness: CWE-476 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
- https://fluidattacks.com/advisories/holiday/ third-party-advisory
- http://www.filseclab.com/en-us/products/twister.htm product