CVE-2018-9003: Input Validation

Published Mar 25, 2018

Updated

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitorx86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c402000.

Affected Software

1 affected component

IObit Advanced SystemCare Ultimate=11.0.1.58

Event History

Mar 25, 2018

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Data Sourced

via NVD·03:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-9003?

The severity of CVE-2018-9003 is high, with a severity value of 7.8.

What is the affected software for CVE-2018-9003?

The affected software for CVE-2018-9003 is IOBit Advanced SystemCare Ultimate version 11.0.1.58.

What is the impact of CVE-2018-9003?

The impact of CVE-2018-9003 is a denial of service (BSOD) or possibly unspecified other impacts.

How can local users exploit CVE-2018-9003?

Local users can exploit CVE-2018-9003 by not validating input values from IOCtl 0x9c402000 in the Monitor_x86.sys driver file.

Is there a proof of concept for CVE-2018-9003?

Yes, a proof of concept for CVE-2018-9003 is available at the following link: [GitHub - POC_BSOD](https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c402000)