CVE-2018-5277: Input Validation
DISPUTED In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e000. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5277?
The severity of CVE-2018-5277 is currently disputed, but it can potentially cause a denial of service.
How do I fix CVE-2018-5277?
To fix CVE-2018-5277, update to the latest version of Malwarebytes, which addresses this vulnerability.
What software is affected by CVE-2018-5277?
CVE-2018-5277 affects Malwarebytes Premium version 3.3.1.2183.
What type of attack does CVE-2018-5277 facilitate?
CVE-2018-5277 allows local users to trigger a denial of service attack by exploiting input validation issues in the driver file.
Is there a known exploit for CVE-2018-5277?
While there is a mention of a proof of concept for CVE-2018-5277, the vendor has reported they were unable to replicate the issue.