First published: Mon Jan 08 2018(Updated: )
** DISPUTED ** In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e02c. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit)."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Malwarebytes Anti-Malware | =3.3.1.2183 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-5279 is considered to have a medium severity risk due to its potential to cause a denial of service (BSOD).
To mitigate CVE-2018-5279, users should update to the latest version of Malwarebytes to ensure all security patches are applied.
CVE-2018-5279 specifically affects Malwarebytes Premium version 3.3.1.2183.
There is currently no public indication that CVE-2018-5279 is actively being exploited in the wild.
The primary consequence of CVE-2018-5279 is a denial of service, which could result in system instability or crashes.