CVE-2018-5275: Input Validation
DISPUTED In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5275?
CVE-2018-5275 is a disputed denial of service vulnerability that could cause a blue screen of death (BSOD) in Malwarebytes Premium 3.3.1.2183.
How do I fix CVE-2018-5275?
To mitigate CVE-2018-5275, ensure you are using the latest version of Malwarebytes that addresses this vulnerability.
What impact does CVE-2018-5275 have?
CVE-2018-5275 may allow local users to cause a denial of service or potentially other unspecified impacts due to improper input validation.
Is there a workaround for CVE-2018-5275?
Currently, no specific workaround is documented for CVE-2018-5275; updating to a patched version of the software is recommended.
Which software is affected by CVE-2018-5275?
CVE-2018-5275 affects Malwarebytes Premium version 3.3.1.2183.