CVE-2018-5279

2018-01-0805:00:00

mitre

github.com

AI Score

7.6

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit).

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:malwarebytes:malwarebytes:3.3.1.2183:*:*:*:premium:*:*:*"
    ],
    "vendor": "malwarebytes",
    "product": "malwarebytes",
    "versions": [
      {
        "status": "affected",
        "version": "3.3.1.2183"
      }
    ],
    "defaultStatus": "unknown"
  }
]