Null pointer dereference

2023-03-0608:15:00

PRIOn knowledge base

www.prio-n.com

null pointer dereference

fabulatech webcam

remote desktop

library ftwebcam.sys

ioctl handler

local attack

exploit disclosure

vdb-222358

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
webcam_for_remote_desktopeq2.8.42

CPE	Name	Operator	Version
	webcam_for_remote_desktop	eq	2.8.42

References

github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186

vuldb.com/?ctiid.222358

vuldb.com/?id.222358