PT-2019-18115
CVE-2019-6492
·
تاريخ النشر
2019-03-18
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IObit Smart Defrag version 6
Description
The issue concerns the SmartDefragDriver.sys driver in IObit Smart Defrag 6, which fails to free an executable kernel pool allocated with user-defined bytes and size when a specific IOCTL (0x9C401CC4) is called. This can lead to a kernel pointer leak if the kernel pool becomes a "big" pool.
Recommendations
For IObit Smart Defrag version 6, consider disabling the SmartDefragDriver.sys driver until a patch is available to prevent potential exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾