Zeze7W

**Name of the Vulnerable Software and Affected Versions** Softland FBackup versions up to 9.9 **Description** A security flaw exists in Softland FBackup. The issue involves link following due to manipulation within an unknown function in the library `C:Program FilesCommon Filesmicrosoft sharedinkHID.dll` of the Backup/Restore component. The attack requires local access. The exploit has been publicly released. The vendor was notified but did not respond. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ermig1979 AntiDupl versions prior to 2.3.12 **Description** A local vulnerability exists in ermig1979 AntiDupl up to version 2.3.12. The issue resides in an unknown function within the `AntiDupl.NET.WinForms.exe` file of the Delete Duplicate Image Handler component, allowing for link following. The vendor was contacted regarding this issue but did not respond. **Recommendations** Update ermig1979 AntiDupl to a version newer than 2.3.12.

**Name of the Vulnerable Software and Affected Versions** FabulaTech USB for Remote Desktop version 6.1.0.0 **Description** A vulnerability was found in the IoControlCode Handler component of FabulaTech USB for Remote Desktop, affecting the function 0x220448/0x220420/0x22040c/0x220408. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. This issue is related to errors in pointer dereferencing, which can allow an attacker to cause a denial of service. **Recommendations** For FabulaTech USB for Remote Desktop version 6.1.0.0, as a temporary workaround, consider disabling the affected function 0x220448/0x220420/0x22040c/0x220408 of the IoControlCode Handler component until a patch is available. Restrict access to the IoControlCode Handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Twister Antivirus version 8 **Description** A problematic issue has been found in the function 0x804f2158/0x804f2154/0x804f2150/0x804f215c/0x804f2160/0x80800040/0x804f214c/0x804f2148/0x804f2144/0x801120e4/0x804f213c/0x804f2140 in the library filppd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider disabling the affected function in the library filppd.sys until a patch is available. Restrict access to the IoControlCode Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Twister Antivirus version 8 **Description** The issue is related to a buffer overflow in the filppd.sys file of the IoControlCode Handler in Twister Antivirus, leading to memory corruption. This can allow an attacker to impact the confidentiality, integrity, and availability of protected information. Local access is required to exploit this issue. The exploit has been disclosed publicly. **Recommendations** For Twister Antivirus version 8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EnTech Monitor Asset Manager version 2.9 **Description** A vulnerability was found in the function 0x80002014 of the component IoControlCode Handler, which leads to denial of service. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For EnTech Monitor Asset Manager version 2.9, as a temporary workaround, consider disabling the function 0x80002014 of the IoControlCode Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** FlexiHub version 5.5.14691.0 **Description** A problematic vulnerability has been found in the library fusbhub.sys of the component IoControlCode Handler, affecting the function 0x220088. This leads to a null pointer dereference. The attack must be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For FlexiHub version 5.5.14691.0, as a temporary workaround, consider disabling the function 0x220088 in the library fusbhub.sys until a patch is available. Restrict access to the IoControlCode Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** eScan Antivirus version 22.0.1400.2443 **Description** A problematic vulnerability was found in the function `0x22E008u` in the library `PROCOBSRVESX.SYS` of the component IoControlCode Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. **Recommendations** For eScan Antivirus version 22.0.1400.2443, as a temporary workaround, consider disabling the `0x22E008u` function in the `PROCOBSRVESX.SYS` library until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DriverGenius version 9.70.0.346 **Description** A vulnerability was found in the function `0x9c40a0c8/0x9c40a0dc/0x9c40a0e0/0x9c40a0d8/0x9c4060d4/0x9c402004/0x9c402088/0x9c40208c/0x9c4060d0/0x9c4060cc/0x9c4060c4/0x9c402084` in the library `mydrivers64.sys` of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. **Recommendations** As a temporary workaround, consider disabling the affected function in the library `mydrivers64.sys` until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DriverGenius version 9.70.0.346 **Description** A critical issue has been found in the function 0x9C402088 in the library mydrivers64.sys of the component IOCTL Handler, leading to memory corruption. The manipulation requires a local attack. The exploit has been disclosed to the public and may be used. **Recommendations** For DriverGenius version 9.70.0.346, as a temporary workaround, consider disabling the function 0x9C402088 in the library mydrivers64.sys to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DriverGenius version 9.70.0.346 **Description** A critical vulnerability has been found in DriverGenius, affecting the function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library mydrivers64.sys of the component IOCTL Handler. This manipulation leads to memory corruption and requires a local attack approach. The exploit has been disclosed to the public and may be used. **Recommendations** For DriverGenius version 9.70.0.346, as a temporary workaround, consider disabling the affected function 0x9C40A0D8/0x9C40A0DC/0x9C40A0E0 in the library mydrivers64.sys until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DriverGenius version 9.70.0.346 **Description** A critical vulnerability was found in DriverGenius, affecting the function 0x9C406104/0x9C40A108 in the library mydrivers64.sys of the component IOCTL Handler. This leads to memory corruption. The attack must be approached locally. The exploit has been disclosed to the public and may be used. **Recommendations** For DriverGenius version 9.70.0.346, as a temporary workaround, consider disabling the affected function 0x9C406104/0x9C40A108 in the library mydrivers64.sys until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A vulnerability in the ImfRegistryFilter.sys component of IObit Malware Fighter is related to incorrect clearing or release of resources. The manipulation of this issue can lead to denial of service. It requires a local attack to exploit. The function 0x8001E024/0x8001E040 in the library ImfRegistryFilter.sys of the component IOCTL Handler is affected by this issue. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the `0x8001E024/0x8001E040` function in the ImfRegistryFilter.sys library as a temporary workaround until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A problematic vulnerability was found in the IOCTL Handler component of the library ObCallbackProcess.sys, affecting the function 0x222034/0x222038/0x22203C/0x222040. This leads to denial of service and requires local access to exploit. The exploit has been disclosed to the public. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the affected function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys as a temporary workaround until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A vulnerability was found in the function `0x222010` in the library `ObCallbackProcess.sys` of the component IOCTL Handler. This issue is related to incorrect cleanup or release of resources. The manipulation leads to denial of service. The attack needs to be approached locally. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the `0x222010` function in the `ObCallbackProcess.sys` library as a temporary workaround until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A problematic issue has been found in the function `0x222018` in the library `ObCallbackProcess.sys` of the component IOCTL Handler. This issue leads to denial of service and can be exploited locally. The exploit has been disclosed to the public and may be used. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the `0x222018` function in the `ObCallbackProcess.sys` library until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** The issue is related to the incorrect cleanup or release of resources in the IMFCameraProtect.sys component of IObit Malware Fighter. This can lead to a denial of service when exploited. The attack must be approached locally and affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the `0x8018E008` function in the IMFCameraProtect.sys library as a temporary workaround until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A vulnerability has been found in the function `0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040` in the library `ImfHpRegFilter.sys` of the component IOCTL Handler, leading to denial of service. The manipulation requires a local attack. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the vulnerable function `0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040` in the library `ImfHpRegFilter.sys` to minimize the risk of exploitation until a patch is available.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A vulnerability was found in the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler, leading to denial of service. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used. **Recommendations** For IObit Malware Fighter version 9.4.0.776, consider disabling the function 0x8018E010 in the library IMFCameraProtect.sys to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Malware Fighter version 9.4.0.776 **Description** A critical issue affects the `IMFCameraProtect.sys` library in the IOCTL Handler component, leading to a stack-based buffer overflow due to the manipulation of the function `0x8018E000/0x8018E004`. This can be exploited locally, potentially allowing an attacker to elevate their privileges. The exploit has been publicly disclosed. **Recommendations** For IObit Malware Fighter version 9.4.0.776, as a temporary workaround, consider disabling the `IMFCameraProtect.sys` library until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.