PT-2022-24061 · Iobit · Iobit Malware Fighter

Mrvar0X · Published 2022-09-06 · Updated 2022-09-09 · CVE-2022-37771

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 9.2

Description The issue allows authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable, due to the lack of tamper protection.

Recommendations For IObit Malware Fighter version 9.2, consider applying additional security measures to restrict access to the application and its components, and monitor for any suspicious activity that may indicate exploitation of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2022-37771

Affected Products

Iobit Malware Fighter

References · 4

• 🔥 https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.html · Exploit
• 🔥 https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-37771 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37771 · Vendor Advisory