Vulnerability Description
In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Malwarefox | Anti-Malware | 2.72.169 |
Related Weaknesses (CWE)
References
- https://github.com/whiteHat001/DRIVER_POC/tree/master/malwarefox/0x80002054ExploitThird Party Advisory
- https://github.com/whiteHat001/DRIVER_POC/tree/master/malwarefox/0x80002054ExploitThird Party Advisory
FAQ
What is CVE-2018-5714?
CVE-2018-5714 is a vulnerability with a CVSS score of 7.8 (HIGH). In Malwarefox Anti-Malware 2.72.169, the driver file (zam64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values...
How severe is CVE-2018-5714?
CVE-2018-5714 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-5714?
Check the references section above for vendor advisories and patch information. Affected products include: Malwarefox Anti-Malware.