PT-2020-15597 · Iobit+1 · Iobit Malware Fighter+1

Published 2020-10-27 · Updated 2020-10-27 · CVE-2020-23864

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IOBit Malware Fighter version 8.0.2.547

Description The issue allows for local escalation of privileges. This can be achieved by dropping a malicious DLL file into the WindowsApps folder, potentially enabling an attacker to gain elevated access to the system.

Recommendations For IOBit Malware Fighter version 8.0.2.547, consider restricting write access to the WindowsApps folder as a temporary mitigation measure until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2020-23864

Affected Products

Iobit Malware Fighter

Windows

References · 3

• 🔥 http://daniels-it-blog.blogspot.com/2020/07/iobit-malware-fighter-arbitrary-code.html · Exploit
• https://osv.dev/vulnerability/CVE-2020-23864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23864 · Security Note