CVE-2018-9044: Input Validation

Published Mar 27, 2018

Updated

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitorwin10x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc.

Affected Software

1 affected component

IObit Advanced SystemCare Ultimate=11.0.1.58

Event History

Mar 27, 2018

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Data Sourced

via NVD·03:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-9044.

What software version is affected by the vulnerability?

The vulnerability affects IOBit Advanced SystemCare Ultimate version 11.0.1.58.

What is the severity of CVE-2018-9044?

The severity of CVE-2018-9044 is high with a CVSS score of 7.8.

How can local users exploit this vulnerability?

Local users can exploit this vulnerability by not validating input values from IOCtl 0x9c4060cc, which can cause a denial of service (BSOD) or have unspecified other impact.

Is there a fix available for CVE-2018-9044?

At the moment, there is no specific fix available for CVE-2018-9044. It is recommended to update to a newer version of the software if available.