Stack-Based Buffer Overflow in IOBit Malware Fighter
CVE-2018-19085

7.8HIGH

Key Information:

Vendor

Iobit

Status
Malware Fighter
Vendor
CVE Published:
10 November 2018

What is CVE-2018-19085?

IOBit Malware Fighter 6.2 contains a vulnerability in the RegFilter.sys driver that is prone to a stack-based buffer overflow. This occurs when an attacker sends a specially crafted IOCTL request with a size exceeding 8 bytes, potentially leading to denial of service or allowing execution of arbitrary code with elevated privileges. It is crucial for users to apply security updates and mitigate risks associated with this vulnerability.

References

https://downwithup.github.io/CVEPosts.html
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.