Vulnerabilities > CVE-2018-18714 - Out-of-bounds Write vulnerability in Iobit Malware Fighter

CVSS 7.2 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

local

low complexity

iobit

CWE-787

NVD

Published: 2018-11-01

Updated: 2020-08-24

Summary

RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.

Vulnerable Configurations

Part	Description	Count
Application	Iobit Iobit Malware Fighter 1.0 Iobit Malware Fighter 1.3.0.3 Iobit Malware Fighter 2.4.1 Iobit Malware Fighter 3.0.1.12 Iobit Malware Fighter 3.0.2.29 Iobit Malware Fighter 3.1.0 Iobit Malware Fighter 3.1.0.18 Iobit Malware Fighter 3.2.0 Iobit Malware Fighter 3.3.0.8 Iobit Malware Fighter 3.4.0.9 Iobit Malware Fighter 4.0.3.18 Iobit Malware Fighter 4.0.3.20 Iobit Malware Fighter 4.0.3.22 Iobit Malware Fighter 4.0.3.1839 Iobit Malware Fighter 4.0.3.2039 Iobit Malware Fighter 4.0.3.2240 Iobit Malware Fighter 4.1.0.2246 Iobit Malware Fighter 4.2.0.2425 Iobit Malware Fighter 4.2.0.2458 Iobit Malware Fighter 4.2.02425 Iobit Malware Fighter 4.3.0.2688 Iobit Malware Fighter 4.3.0.2739 Iobit Malware Fighter 4.3.1.2873 Iobit Malware Fighter 4.4.0.3072 Iobit Malware Fighter 4.5.0.3457 Iobit Malware Fighter 4.5.03457 Iobit Malware Fighter 5.0.2.3752 Iobit Malware Fighter 5.0.2.3788 Iobit Malware Fighter 5.1.0 Iobit Malware Fighter 5.2.0 Iobit Malware Fighter 5.3.0 Iobit Malware Fighter 5.4.0 Iobit Malware Fighter 5.5.0 Iobit Malware Fighter 5.6.0 Iobit Malware Fighter 6.0.0 Iobit Malware Fighter 6.0.2 Iobit Malware Fighter 6.1.0 Iobit Malware Fighter 6.2	38

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://downwithup.github.io/CVEPosts.html