CVE-2023-1644: medium-severity vulnerability in IObit Malware Fighter
IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 0.3%
A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224024.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
IObit · Malware FighterRelated CVEs — IObit Malware Fighter
In the same product, most dangerous first.
CVE-2023-1646MEDIUMIObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflowEPSS 0.4%CVE-2023-1643MEDIUMIObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of serviceEPSS 0.3%CVE-2023-1641MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of serviceEPSS 0.3%CVE-2023-1640MEDIUMIObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of serviceEPSS 0.3%CVE-2023-1639MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of serviceEPSS 0.3%CVE-2023-1638MEDIUMIObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of serviceEPSS 0.3%