CVE-2023-1646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-1646
A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224026 is the identifier assigned to this vulnerability.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:L/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 3.1 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view Product Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646 Exploit Third Party Advisory
https://vuldb.com/?ctiid.224026 Permissions Required Third Party Advisory
https://vuldb.com/?id.224026 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*
History

30 Oct 2023, 19:25

Type Values Removed Values Added
References (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646 - (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646 - Exploit, Third Party Advisory

21 Oct 2023, 14:15

Type Values Removed Values Added
References
  • {'url': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned42', 'name': 'https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned42', 'tags': ['Broken Link'], 'refsource': 'MISC'}
  • (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1646 -

30 Mar 2023, 16:22

Type Values Removed Values Added
First Time Iobit malware Fighter
Iobit
CPE cpe:2.3:a:iobit:malware_fighter:9.4.0.776:*:*:*:*:*:*:*
CWE CWE-787
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned42 - (MISC) https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned42 - Broken Link
References (MISC) https://vuldb.com/?id.224026 - (MISC) https://vuldb.com/?id.224026 - Third Party Advisory
References (MISC) https://vuldb.com/?ctiid.224026 - (MISC) https://vuldb.com/?ctiid.224026 - Permissions Required, Third Party Advisory
References (MISC) https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view - (MISC) https://drive.google.com/file/d/1GITWzh29cRcycVqVJgMJuX6emE_f1KPV/view - Product, Third Party Advisory

26 Mar 2023, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-03-26 23:15

Updated : 2024-04-11 01:18

NVD link : CVE-2023-1646

Mitre link : CVE-2023-1646

CVE.ORG link : CVE-2023-1646

JSON object : View

Products Affected

iobit

  • malware_fighter
CWE
CWE-787

Out-of-bounds Write

CWE-121

Stack-based Buffer Overflow