CVE-2018-9005: Input Validation

Published Mar 25, 2018

Updated

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitorwin7x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0.

Affected Software

1 affected component

IObit Advanced SystemCare Ultimate=11.0.1.58

Event History

Mar 25, 2018

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Data Sourced

via NVD·03:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-9005?

CVE-2018-9005 is a vulnerability in Advanced SystemCare Ultimate 11.0.1.58 that allows local users to cause a denial of service or possibly have other unspecified impact by exploiting a driver file (Monitor_win7_x64.sys) that does not validate input values from IOCTL 0x9c4060d0.

How does CVE-2018-9005 affect Advanced SystemCare Ultimate?

CVE-2018-9005 affects Advanced SystemCare Ultimate 11.0.1.58 by allowing local users to cause a denial of service (BSOD) or potentially have other unspecified impact.

What is the severity of CVE-2018-9005?

CVE-2018-9005 has a severity rating of high, with a severity value of 7.8.

How can I fix the CVE-2018-9005 vulnerability in Advanced SystemCare Ultimate?

To fix the CVE-2018-9005 vulnerability in Advanced SystemCare Ultimate, it is recommended to update to a version that includes the necessary security patches.

Where can I find more information about CVE-2018-9005?

You can find more information about CVE-2018-9005 and the exploit at the following reference link: https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x64.sys-0x9c4060d0