CVE-2018-5274: Input Validation
DISPUTED In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E024. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5274?
CVE-2018-5274 has been reported to potentially cause a denial of service (BSOD), indicating a significant risk to system stability.
How do I fix CVE-2018-5274?
To mitigate CVE-2018-5274, you should update Malwarebytes to the latest version or uninstall the affected version.
What systems are affected by CVE-2018-5274?
CVE-2018-5274 specifically affects Malwarebytes Premium version 3.3.1.2183.
Is there a workaround for CVE-2018-5274?
Currently, the only effective workaround for CVE-2018-5274 is to avoid using the affected driver or to limit access to local users.
What kind of impact can CVE-2018-5274 have?
CVE-2018-5274 can lead to system crashes and may allow local users to influence system behavior, resulting in unspecified impacts.