Denial of Service Vulnerability in Advanced SystemCare by IObit
CVE-2018-9001

7.8HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
25 March 2018

What is CVE-2018-9001?

In Advanced SystemCare Ultimate version 11.0.1.58, a vulnerability exists in the driver file Monitor_win7_x64.sys that allows local users to trigger a denial of service. This occurs due to insufficient validation of input values during IOCtl calls, specifically with the value 0x9c402000. The failure to properly validate these inputs can potentially result in a system crash or BSOD, impacting system availability.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.