Denial of Service Vulnerability in Malwarebytes Anti-Exploit

CVE-2014-100039

What is CVE-2014-100039?

A vulnerability in Malwarebytes Anti-Exploit allows local users to exploit an issue in the mbae.sys driver, leading to a denial of service condition. Specifically, a crafted size in an unspecified IOCTL call can trigger an out-of-bounds read, potentially crashing the system. This flaw affects versions prior to 1.05.1.2014 and underscores the importance of keeping security software up to date to prevent local exploitation.

References