PT-2023-2362

CVE-2023-1640

·

Published

2023-03-26

·

Updated

2024-05-17

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions IObit Malware Fighter version 9.4.0.776
Description A vulnerability was found in the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. This issue is related to incorrect cleanup or release of resources. The manipulation leads to denial of service. The attack needs to be approached locally.
Recommendations For IObit Malware Fighter version 9.4.0.776, consider disabling the 0x222010 function in the ObCallbackProcess.sys library as a temporary workaround until a patch is available. Restrict access to the IOCTL Handler component to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾