Denial of Service Vulnerability in Advanced SystemCare by IObit
CVE-2018-9003

7.8HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
25 March 2018

What is CVE-2018-9003?

In Advanced SystemCare Ultimate version 11.0.1.58, a vulnerability exists in the driver file Monitor_x86.sys. This issue arises from the driver's failure to properly validate input values from the IOCtl command 0x9c402000. As a result, local users can exploit this vulnerability to induce a denial of service (BSOD), potentially leading to system instability and interruptions. It is crucial for users of this software to apply security updates and follow best practices to mitigate risks associated with this vulnerability.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.