CVE-2018-5279: Input Validation
DISPUTED In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit)."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5279?
CVE-2018-5279 is considered to have a medium severity risk due to its potential to cause a denial of service (BSOD).
How do I fix CVE-2018-5279?
To mitigate CVE-2018-5279, users should update to the latest version of Malwarebytes to ensure all security patches are applied.
What systems are impacted by CVE-2018-5279?
CVE-2018-5279 specifically affects Malwarebytes Premium version 3.3.1.2183.
Is CVE-2018-5279 actively being exploited?
There is currently no public indication that CVE-2018-5279 is actively being exploited in the wild.
What are the potential consequences of CVE-2018-5279?
The primary consequence of CVE-2018-5279 is a denial of service, which could result in system instability or crashes.