Denial of Service Vulnerability in Jiangmin Antivirus by Jiangmin
CVE-2018-6780

7.8HIGH

Key Information:

Vendor

Jiangmin

Status
Antivirus
Vendor
CVE Published:
3 October 2022

What is CVE-2018-6780?

In the Jiangmin Antivirus 16.0.0.100, a flaw exists in the driver file KSysCall.sys, where insufficient validation of input values from IOCtl 0x9A0081E4 allows local users to induce a deniable service condition, potentially resulting in a system crash (BSOD) or further unspecified impacts. It is crucial for users to ensure that they are protected against this weakness, which may compromise the availability of their systems.

References

https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Jiangmin_...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.