PT-2023-11661 · Iobit · Iobit Malware Fighter

Published 2023-09-19 · Updated 2024-09-25 · CVE-2020-24089

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IOBit Malware Fighter version 8.0.2

Description An issue was discovered in ImfHpRegFilter.sys, allowing local attackers to cause a denial of service (DoS).

Recommendations For IOBit Malware Fighter version 8.0.2, consider updating to a newer version to mitigate the risk, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider disabling the ImfHpRegFilter.sys driver until a patch is available.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-24089

Affected Products

Iobit Malware Fighter

References · 9

• 🔥 https://github.com/rjt-gupta/CVE-2020-24089 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-24089 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24089 · Vendor Advisory
• https://t.me/cvenotify/58298 · Telegram Post
• https://t.me/cvenotify/95971 · Telegram Post
• https://twitter.com/geekphane/status/1704868137298985241 · Twitter Post
• https://twitter.com/CVEnew/status/1704282509356237259 · Twitter Post
• https://twitter.com/DMFezzaReedCISA/status/1704364093920923872 · Twitter Post
• https://t.me/cvenotify/58148 · Telegram Post