CVE-2019-6492: Medium severity iobit smart defrag vulnerability
Published Mar 18, 2019
·Updated
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.
Affected Software
1 affected component
IObit Smart Defrag=6.0
Event History
Mar 18, 2019
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
Description
Mar 21, 2019
Data Sourced
via NVD·04:01 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2019-6492.
2
What is the title of this vulnerability?
The title of this vulnerability is 'SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC4 is called.'
3
What is the severity of CVE-2019-6492?
The severity of CVE-2019-6492 is medium with a severity value of 5.5.
4
Which software is affected by CVE-2019-6492?
IObit Smart Defrag 6 (version 6.0) is affected by CVE-2019-6492.
5
How can the kernel pointer be leaked in this vulnerability?
The kernel pointer can be leaked if the kernel pool becomes a 'big' pool.