Denial of Service Vulnerability in Advanced SystemCare by IObit
CVE-2018-9043

7.8HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
27 March 2018

What is CVE-2018-9043?

Advanced SystemCare Ultimate 11.0.1.58 has a vulnerability in its driver file (Monitor_win10_x64.sys) that allows local users to trigger a denial of service. This occurs due to insufficient validation of input values from the IOCtl command, specifically 0x9c4060d0. Exploiting this vulnerability could result in a Blue Screen of Death (BSOD) or other unspecified impacts, compromising the system's stability. Users of this version are advised to consider upgrading or implementing measures to mitigate potential risks.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.