CVE-2018-16712

The CVE-2018-16712 entry relates to IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys. The connected sources describe that versions 1.2.0.5 (and possibly earlier) expose a vulnerability via a specifically crafted IOCTL 0x9C406104 that allows reading physical ...

CVE-2018-16711: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402088 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for...

CVE-2018-16712: Exposure of Sensitive Information to an Unauthorized Actor

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory...

CVE-2018-16713: Improper Restriction of Operations within the Bounds of a Memory Buffer

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

PT-2018-1950

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and earlier Description The issue is related to privilege management errors in the utility. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability ...

PT-2018-1952

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and possibly earlier Description The issue is related to privilege management errors in the utility. It may allow a remote attacker to impact the confidentiality, integrity, and availability of...

PT-2018-1951

Name of the Vulnerable Software and Affected Versions IObit Advanced SystemCare versions 1.2.0.5 and earlier Description The issue is related to insufficient data protection in the utility. It allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory, potentially disclosi...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Iobit Advanced_Systemcare

CVE-2018-16712 PoC Code for CVE-2018-...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iobit Advanced_Systemcare

CVE-2018-16711 PoC code for CVE-2018-...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iobit Advanced_Systemcare

CVE-2018-16713 PoC code for CVE-2018-...

IObit Uninstaller 6.0.2.156 Privilege Escalation

===================================================== IObit Uninstaller v6.0.2.156 - Unquoted Service Path Privilege Escalation ===================================================== Vendor Homepage: http://www.iobit.com Date: 24 Oct 2016 Version : 6.0.2.156 Software Link:...

IObit Advanced SystemCare Elevation of Privilege Vulnerability

IObit Advanced SystemCare is an American junk cleaner for Windows systems. An elevation of privilege vulnerability exists in IObit Advanced SystemCare 10.0.2, which stems from the default installation of IObit Advanced SystemCare's service path without quotes, which allows a local attacker to...

IObit Advanced SystemCare 9 Unquoted Service Path Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits Exploit Title: IObit Advanced SystemCare 9 Unquoted Service Path Privilege Escalation Date: 19/10/2016 Exploit Author: Federico Zambito Vendor Homepage: http://www.iobit.com/ Software Link: http://www.iobit.com/en/advancedsystemcarefree.php...

IObit Advanced SystemCare 10.0.2 Privilege Escalation

Exploit Title: IObit Advanced SystemCare Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/en/advancedsystemcarefree.php version : 10.0.2 Latest Tested on: Windo...

IObit Advanced SystemCare 10.0.2 - Unquoted Service Path Privilege Escalation

Exploit Title: IObit Advanced SystemCare Unquoted Service Path Privilege Escalation Date: 19/10/2016 Author: Ashiyane Digital Security Team Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/en/advancedsystemcarefree.php version : 10.0.2 Latest Tested on: Windo...

IObit Malware Fighter 4.3.1 Privilege Escalation

Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/downloadcenter.php?product=malware-fighter-free version : 4.3.1 Latest Tested on: Windows 7 IObi...

IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation

IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link:...

IObit Malware Fighter 4.3.1 - Unquoted Service Path Privilege Escalation

Exploit Title: IObit Malware Fighter Unquoted Service Path Privilege Escalation Date: 12/10/2016 Author: Amir.ght Vendor Homepage: http://www.iobit.com/en/index.php Software Link: http://www.iobit.com/downloadcenter.php?product=malware-fighter-free version : 4.3.1 Latest Tested on: Windows 7 IObi...

IObit Protected Folder protection bypass

It's possible to bypass protection, e.g. by changing return value of password checking function...

IObit Protected Folder Authentication Bypass

From IObit: "Protected Folder is designed to password-protect your folders and files from being seen, read or modified in Windows 7, Vista, XP and Server 2008, 2003. It works like a safety box, just drag and drop the folders or files you want to hide or protect into Protected Folder, then no one...