MalwareFox AntiMalware 2.74.0.150 - Privilege Escalation

/ Title: MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation Date: 03/02/2018 Author: Souhail Hammou Vendor Homepage: https://www.malwarefox.com/ Version: 2.74.0.150 Tested on: Windows 7 32-bit / Windows 10 64-bit CVE: CVE-2018-6606 / include include include BOOL...

CVE-2018-6606

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate privileges...

CVE-2018-6606

MalwareFox AntiMalware 2.74.0.150 contains a local privilege escalation flaw in the zam32.sys and zam64.sys drivers. A non-privileged process can register itself with the driver by sending IOCTL 0x80002010, then elevate privileges via IOCTL 0x8000204C to the .\ZemanaAntiMalware interface. Public ...