PT-2023-17130 · Unknown · Jiangmin Antivirus

Published 2023-03-25 · Updated 2024-05-17 · CVE-2023-1628

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Jianming Antivirus version 16.2.2022.418

Description A problematic vulnerability has been found in the library kvcore.sys of the component IoControlCode Handler, affecting an unknown function. The manipulation leads to null pointer dereference. The attack needs to be approached locally.

Recommendations For Jianming Antivirus version 16.2.2022.418, as a temporary workaround, consider restricting access to the IoControlCode Handler component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2023-1628

Affected Products

Jiangmin Antivirus

References · 9

• 🔥 https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-1628 · Security Note
• https://osv.dev/vulnerability/CVE-2023-1628 · Vendor Advisory
• https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30 · Note
• https://vuldb.com/?ctiid.224010 · Note
• https://t.me/cvenotify/46859 · Telegram Post
• https://vuldb.com/?id.224010 · Note
• https://t.me/cibsecurity/60743 · Telegram Post
• https://t.me/cvenotify/47206 · Telegram Post