CVE-2018-6472: Input Validation
In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6472?
The severity of CVE-2018-6472 is considered high due to its potential to cause denial of service and unspecified impacts.
How do I fix CVE-2018-6472?
To fix CVE-2018-6472, ensure that you update to the latest version of SUPERAntiSpyware that addresses this vulnerability.
What are the impact and risks associated with CVE-2018-6472?
The impact of CVE-2018-6472 includes system crashes leading to a blue screen of death (BSOD) and possible exploitation by local users.
Who is affected by CVE-2018-6472?
CVE-2018-6472 affects local users of SUPERAntiSpyware Professional version 6.0.1254 by allowing unauthorized actions through incorrect input validation.
What is the vulnerable component in CVE-2018-6472?
The vulnerable component in CVE-2018-6472 is the driver file SASKUTIL.SYS used by SUPERAntiSpyware Professional.