CVE-2018-16711: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402088 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for...

CVE-2018-16712: Exposure of Sensitive Information to an Unauthorized Actor

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

PT-2018-1950

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and earlier Description The issue is related to privilege management errors in the utility. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability ...

PT-2018-1951

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and earlier Description The issue is related to insufficient data protection in the utility. It allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory, potentially disclosi...

PT-2018-1952

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and possibly earlier Description The issue is related to privilege management errors in the utility. It may allow a remote attacker to impact the confidentiality, integrity, and availability of...

IObit Advanced SystemCare Elevation of Privilege Vulnerability

IObit Advanced SystemCare is an American junk cleaner for Windows systems. An elevation of privilege vulnerability exists in IObit Advanced SystemCare 10.0.2, which stems from the default installation of IObit Advanced SystemCare's service path without quotes, which allows a local attacker to...

IObit Advanced SystemCare 9 Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: IObit Advanced SystemCare 9 Unquoted Service Path Privilege Escalation Date: 19/10/2016 Exploit Author: Federico Zambito Vendor Homepage: http://www.iobit.com/ Software Link: http://www.iobit.com/en/advancedsystemcarefree.php...