Lucene search
HistoryFeb 13, 2024 - 3:15 p.m.
CVE-2024-23440
cve-2024-23440
vba32 antivirus
memory read vulnerability
vba32m64.sys
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
0.0004 Low
EPSS
Percentile
9.2%
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer.
Related
cve
cve
CVE-2024-23440
2024-02-13 15:15:09
cvelist
cvelist
CVE-2024-23440 Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
2024-02-13 15:01:12
prion
prion
Null pointer dereference
2024-02-13 15:15:00
6.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2024-23440