PT-2023-17141 · Iobit · Iobit Malware Fighter

Zeze7W · Published 2023-03-26 · Updated 2024-05-17 · CVE-2023-1643

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 9.4.0.776

Description A vulnerability has been found in the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler, leading to denial of service. The manipulation requires a local attack.

Recommendations For IObit Malware Fighter version 9.4.0.776, consider disabling the vulnerable function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2023-1643

Affected Products

Iobit Malware Fighter

References · 10

• 🔥 https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1643 · Exploit
• 🔥 https://drive.google.com/file/d/1dHdltwenfMdwAPeb3JPex0fHxfK_iLYh/view · Exploit
• https://osv.dev/vulnerability/CVE-2023-1643 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1643 · Security Note
• https://t.me/cvenotify/46906 · Telegram Post
• https://t.me/cvenotify/46907 · Telegram Post
• https://vuldb.com/?ctiid.224023 · Note
• https://t.me/cibsecurity/60770 · Telegram Post
• https://vuldb.com/?id.224023 · Note
• https://t.me/cvenotify/59898 · Telegram Post