Vulnerabilities > CVE-2018-18026 - Out-of-bounds Write vulnerability in Iobit Malware Fighter

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

iobit

CWE-787

NVD

Published: 2018-10-19

Updated: 2020-08-24

Summary

IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.

Vulnerable Configurations

Part	Description	Count
Application	Iobit Iobit Malware Fighter 1.0 Iobit Malware Fighter 1.3.0.3 Iobit Malware Fighter 2.4.1 Iobit Malware Fighter 3.0.1.12 Iobit Malware Fighter 3.0.2.29 Iobit Malware Fighter 3.1.0 Iobit Malware Fighter 3.1.0.18 Iobit Malware Fighter 3.2.0 Iobit Malware Fighter 3.3.0.8 Iobit Malware Fighter 3.4.0.9 Iobit Malware Fighter 4.0.3.18 Iobit Malware Fighter 4.0.3.20 Iobit Malware Fighter 4.0.3.22 Iobit Malware Fighter 4.0.3.1839 Iobit Malware Fighter 4.0.3.2039 Iobit Malware Fighter 4.0.3.2240 Iobit Malware Fighter 4.1.0.2246 Iobit Malware Fighter 4.2.0.2425 Iobit Malware Fighter 4.2.0.2458 Iobit Malware Fighter 4.2.02425 Iobit Malware Fighter 4.3.0.2688 Iobit Malware Fighter 4.3.0.2739 Iobit Malware Fighter 4.3.1.2873 Iobit Malware Fighter 4.4.0.3072 Iobit Malware Fighter 4.5.0.3457 Iobit Malware Fighter 4.5.03457 Iobit Malware Fighter 5.0.2.3752 Iobit Malware Fighter 5.0.2.3788 Iobit Malware Fighter 5.1.0 Iobit Malware Fighter 5.2.0 Iobit Malware Fighter 5.3.0 Iobit Malware Fighter 5.4.0 Iobit Malware Fighter 5.5.0 Iobit Malware Fighter 5.6.0 Iobit Malware Fighter 6.0.0 Iobit Malware Fighter 6.0.2 Iobit Malware Fighter 6.1.0 Iobit Malware Fighter 6.2	38

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References