Vulnerability Description
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
CVSS Score
9.8
CRITICAL
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Iolo | System Shield | 5.0.0.136 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-EsThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/43929/Third Party AdvisoryVDB Entry
- https://www.greyhathacker.net/?p=1006ExploitThird Party Advisory
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-EsThird Party AdvisoryVDB Entry
- https://www.exploit-db.com/exploits/43929/Third Party AdvisoryVDB Entry
- https://www.greyhathacker.net/?p=1006ExploitThird Party Advisory
FAQ
What is CVE-2018-5701?
CVE-2018-5701 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
How severe is CVE-2018-5701?
CVE-2018-5701 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-5701?
Check the references section above for vendor advisories and patch information. Affected products include: Iolo System Shield.