Lucene search

[email protected]CVE-2018-19084

HistoryNov 10, 2018 - 3:29 a.m.

CVE-2018-19084

2018-11-1003:29:00

CWE-787

[email protected]

web.nvd.nist.gov

cve

2018

19084

stack-based buffer overflow

iobit malware fighter 6.2

regfilter.sys

denial of service

code execution

root privileges

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

Affected configurations

NVD

Node

iobitmalware_fighterRange≤6.2

CPENameOperatorVersion
iobit:malware_fighteriobit malware fighterle6.2

CPE	Name	Operator	Version
iobit:malware_fighter	iobit malware fighter	le	6.2

References

downwithup.github.io/CVEPosts.html

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.4%

JSON

Related for CVE-2018-19084

nvd1 cvelist1 prion1