Vulnerability Description
IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Iobit | Malware Fighter | 9.2 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/ExploitThird Party Advisory
- https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-TamperingExploitThird Party AdvisoryVDB Entry
- https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/ExploitThird Party Advisory
- https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-TamperingExploitThird Party AdvisoryVDB Entry
FAQ
What is CVE-2022-37771?
CVE-2022-37771 is a vulnerability with a CVSS score of 6.7 (MEDIUM). IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privile...
How severe is CVE-2022-37771?
CVE-2022-37771 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-37771?
Check the references section above for vendor advisories and patch information. Affected products include: Iobit Malware Fighter, Microsoft Windows.