PT-2018-14324
CVE-2018-18026
·
Published
2018-10-19
·
Updated
2020-08-24
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IObit Malware Fighter versions 6.2 and earlier
Description
The issue is related to a stack-based buffer overflow in the IMFCameraProtect.sys component. An attacker can exploit this by using the DeviceIoControl function to pass a user-specified size, potentially overwriting return addresses. This could result in a denial of service or code execution attack.
Recommendations
For IObit Malware Fighter versions 6.2 and earlier, consider disabling the IMFCameraProtect.sys component until a patch is available to prevent potential exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾