CVE-2018-9151: Null Pointer Dereference
First published: Fri Mar 30 2018(Updated: )
A NULL pointer dereference bug in the function ObReferenceObjectByHandle in the Kingsoft Internet Security 9+ kernel driver KWatch3.sys allows local non-privileged users to crash the system via IOCTL 0x80030030.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| KINGSOFT Internet Security 9 Plus | =2010.06.23.247 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2018-9151.
What is the severity of CVE-2018-9151?
The severity of CVE-2018-9151 is medium.
What is the affected software for CVE-2018-9151?
The affected software for CVE-2018-9151 is KINGSOFT Internet Security 9 Plus version 2010.06.23.247.
How can local non-privileged users exploit CVE-2018-9151?
Local non-privileged users can exploit CVE-2018-9151 by sending IOCTL 0x80030030 requests to the kernel driver KWatch3.sys.
Is there a reference for more information about CVE-2018-9151?
Yes, you can find more information about CVE-2018-9151 at http://seclists.org/fulldisclosure/2018/Mar/78.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/kingsoft
- canonical/kingsoft internet security 9 plus
- version/kingsoft internet security 9 plus/2010.06.23.247