PT-2023-16685 · Unknown · Filmfd.Sys+1

Zeze7W · Published 2023-02-24 · Updated 2024-05-17 · CVE-2023-1008

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Twister Antivirus version 8.17

Description A denial of service issue affects the IoControlCode Handler component in the filmfd.sys library. The manipulation with the function 0x801120E4 leads to denial of service. An attack must be approached locally.

Recommendations For Twister Antivirus version 8.17, consider disabling the IoControlCode Handler component or restricting access to the filmfd.sys library until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2023-1008

Affected Products

Twister Antivirus

Filmfd.Sys

References · 10

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008 · Exploit
• 🔥 https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing · Exploit
• https://osv.dev/vulnerability/CVE-2023-1008 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1008 · Security Note
• https://vuldb.com/?ctiid.221741 · Note
• https://t.me/cvenotify/44902 · Telegram Post
• https://t.me/cvenotify/44897 · Telegram Post
• https://t.me/cvenotify/45002 · Telegram Post
• https://t.me/cibsecurity/58864 · Telegram Post
• https://vuldb.com/?id.221741 · Note