Denial of Service Vulnerability in Advanced SystemCare by IObit
CVE-2018-9004

7.8HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
25 March 2018

What is CVE-2018-9004?

In Advanced SystemCare Ultimate version 11.0.1.58, a security vulnerability exists in the Monitor_x86.sys driver. This flaw allows local users to trigger a denial of service, potentially resulting in a Blue Screen of Death (BSOD) or other unspecified impacts. The vulnerability arises from the failure to validate input values for IOCtl command 0x9c4060d0, leading to system instability and unintended consequences for users.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.