CVE-2018-18026
PoC —CVSS 3.0
7.8 high
EPSS
<1%p54
Published
()
Modified
Description
IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.
- Vendors
- iobit
- Products
- malware fighter
- Weakness
- CWE-787
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.