CVE-2018-16712: Infoleak
First published: Wed Sep 26 2018(Updated: )
IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specially crafted IOCTL 0x9C406104 to read physical memory.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Iobit Advanced Systemcare | <=1.2.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-16712?
CVE-2018-16712 is a vulnerability in IObit Advanced SystemCare that allows a user to send a specially crafted IOCTL to read physical memory.
What versions of IObit Advanced SystemCare are affected by CVE-2018-16712?
Versions up to and including 1.2.0.5 of IObit Advanced SystemCare are affected by CVE-2018-16712.
How can an attacker exploit CVE-2018-16712?
An attacker can exploit CVE-2018-16712 by sending a specially crafted IOCTL 0x9C406104 to read physical memory.
What is the severity of CVE-2018-16712?
CVE-2018-16712 has a severity level of medium.
Is there a fix for CVE-2018-16712?
There is currently no known fix for CVE-2018-16712. It is recommended to update to the latest version of IObit Advanced SystemCare when a fix becomes available.
- collector/nvd-index
- vendor/iobit
- canonical/iobit advanced systemcare
- version/iobit advanced systemcare/1.2.0.5