CVE-2023-1444

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-1444
A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view Exploit
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444 Third Party Advisory
https://vuldb.com/?ctiid.223289 Permissions Required Third Party Advisory
https://vuldb.com/?id.223289 Permissions Required Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:filseclab:twister_antivirus:8.0:*:*:*:*:*:*:*
History

26 Mar 2023, 08:15

Type Values Removed Values Added
Summary A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects some unknown processing in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability. A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.

23 Mar 2023, 15:40

Type Values Removed Values Added
CPE cpe:2.3:a:filseclab:twister_antivirus:8.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
First Time Filseclab twister Antivirus
Filseclab
CWE CWE-404 CWE-476
References (MISC) https://vuldb.com/?id.223289 - (MISC) https://vuldb.com/?id.223289 - Permissions Required, Third Party Advisory
References (MISC) https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view - (MISC) https://drive.google.com/file/d/1KrkezTwgmt5CnhzlyyWVNLIAeiMvuDEr/view - Exploit
References (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444 - (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444 - Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.223289 - (MISC) https://vuldb.com/?ctiid.223289 - Permissions Required, Third Party Advisory

17 Mar 2023, 11:15

Type Values Removed Values Added
References
  • {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned11', 'name': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned11', 'tags': [], 'refsource': 'MISC'}
  • (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1444 -

17 Mar 2023, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-17 07:15

Updated : 2024-04-11 01:18

NVD link : CVE-2023-1444

Mitre link : CVE-2023-1444

CVE.ORG link : CVE-2023-1444

JSON object : View

Products Affected

filseclab

  • twister_antivirus
CWE
CWE-476

NULL Pointer Dereference

CWE-404

Improper Resource Shutdown or Release