PT-2023-17128 · Unknown · Jiangmin Antivirus

CVE-2023-1626

·

Published

2023-03-25

·

Updated

2024-05-17

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Jianming Antivirus version 16.2.2022.418
Description A critical vulnerability has been found in the library kvcore.sys of the component IoControlCode Handler, affecting unknown code. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Recommendations For Jianming Antivirus version 16.2.2022.418, as a temporary workaround, consider restricting access to the IoControlCode Handler component until a patch is available. Additionally, avoid using the library kvcore.sys if possible, to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-1626

Affected Products

Jiangmin Antivirus