Stack-Based Buffer Overflow in IOBit Malware Fighter by IObit
CVE-2018-19084

7.8HIGH

Key Information:

Vendor

Iobit

Status
Malware Fighter
Vendor
CVE Published:
10 November 2018

What is CVE-2018-19084?

IOBit Malware Fighter 6.2 contains a stack-based buffer overflow vulnerability in the RegFilter.sys driver. An attacker exploiting this flaw can use IOCTL 0x8006E05C with a payload exceeding the 8-byte limit. This exploitation could result in a denial of service or allow the attacker to execute arbitrary code with elevated root privileges, potentially compromising the affected system.

References

https://downwithup.github.io/CVEPosts.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.