Denial of Service Vulnerability in Advanced SystemCare Ultimate by IObit
CVE-2018-9044

7.8HIGH

Key Information:

Vendor

Iobit

Status
Advanced Systemcare Ultimate
Vendor
CVE Published:
27 March 2018

What is CVE-2018-9044?

In Advanced SystemCare Ultimate version 11.0.1.58, the driver file Monitor_win10_x64.sys contains a vulnerability that allows local users to trigger a denial of service condition, specifically a Blue Screen of Death (BSOD), due to insufficient input value validation in the IOCTL call 0x9c4060cc. This may lead to system crashes and possible instability, highlighting the need for user awareness and immediate remediation.

References

https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.