PT-2023-17030 · Max Secure · Max Secure Anti Virus Plus

Zeze7W · Published 2023-03-18 · Updated 2024-05-17 · CVE-2023-1493

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus Plus version 19.0.2.1

Description A problem was found in the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. This issue leads to denial of service and can be launched on the local host. The exploit has been disclosed to the public and may be used.

Recommendations For Max Secure Anti Virus Plus version 19.0.2.1, consider disabling the 0x220019 function in the MaxProctetor64.sys library as a temporary workaround until a patch is available. Restrict access to the IoControlCode Handler component to minimize the risk of exploitation.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2023-1493

Affected Products

Max Secure Anti Virus Plus

References · 8

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1493 · Exploit
• 🔥 https://drive.google.com/file/d/109wWkX5FbYrKKqQBXBC1_uLyi02Y7sqF/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1493 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1493 · Vendor Advisory
• https://t.me/cvenotify/46448 · Telegram Post
• https://t.me/cvenotify/46474 · Telegram Post
• https://vuldb.com/?id.223379 · Note
• https://vuldb.com/?ctiid.223379 · Note