CVE-2023-1639: medium-severity vulnerability in IObit Malware Fighter
IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.3%
A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224019.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
IObit · Malware FighterRelated CVEs — IObit Malware Fighter
In the same product, most dangerous first.
CVE-2023-1646MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowEPSS 0.4%CVE-2023-1643MEDIUMIObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1641MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of serviceEPSS 0.3%CVE-2023-1640MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of serviceEPSS 0.3%CVE-2023-1638MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1645MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of serviceEPSS 0.3%