PT-2023-17141 · Iobit · Iobit Malware Fighter

Zeze7W · Publicado 2023-03-26 · Atualizado 2024-05-17 · CVE-2023-1643

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 9.4.0.776

Description A vulnerability has been found in the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler, leading to denial of service. The manipulation requires a local attack.

Recommendations For IObit Malware Fighter version 9.4.0.776, consider disabling the vulnerable function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Improper Resource Release

Enumeração de Fraquezas

CWE-404

Identificadores relacionados

CVE-2023-1643

Produtos afetados

Iobit Malware Fighter

Referências · 10

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643 · Exploit
• 🔥 https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view · Exploit
• https://t.me/cvenotify/46906 · Publicação no Telegram
• https://t.me/cvenotify/46907 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1643 · Aviso do Fabricante
• https://vuldb.com/?ctiid.224023 · Nota
• https://t.me/cibsecurity/60770 · Publicação no Telegram
• https://vuldb.com/?id.224023 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1643 · Nota de Segurança
• https://t.me/cvenotify/59898 · Publicação no Telegram