CVE-2018-9007: Input Validation

Published Mar 25, 2018

Updated

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitorx86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060c4.

Affected Software

1 affected component

IObit Advanced SystemCare Ultimate=11.0.1.58

Event History

Mar 25, 2018

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Data Sourced

via NVD·03:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-9007?

CVE-2018-9007 is a vulnerability in Advanced SystemCare Ultimate 11.0.1.58, where the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact.

How severe is CVE-2018-9007?

CVE-2018-9007 has a severity score of 7.8 (high).

How does CVE-2018-9007 affect Advanced SystemCare Ultimate 11.0.1.58?

CVE-2018-9007 affects Advanced SystemCare Ultimate 11.0.1.58 by allowing local users to cause a denial of service or have other unspecified impact by exploiting the driver file (Monitor_x86.sys).

How can I fix CVE-2018-9007?

To fix CVE-2018-9007, it is recommended to update Advanced SystemCare Ultimate to a version that includes a patch for this vulnerability.

Is there any additional information about CVE-2018-9007?

Yes, you can find additional information about CVE-2018-9007 at the following reference: [GitHub - POC_BSOD](https://github.com/D0neMkj/POC_BSOD/tree/master/Advanced%20SystemCare%20Utimate/Monitor_win7_x86.sys-0x9c4060c4)