PT-2025-3793 · Iobit · Iobit Protected Folder
Topgun
·
Published
2024-12-20
·
Updated
2025-01-05
·
CVE-2025-0223
CVSS v4.0
6.8
Medium
| Vector | AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
IObit Protected Folder versions up to 13.6.0.5
Description
A vulnerability was found in the function
0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.Recommendations
For IObit Protected Folder versions up to 13.6.0.5, as a temporary workaround, consider disabling the affected function
0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Improper Resource Release
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Iobit Protected Folder