First published: Thu Apr 11 2019(Updated: )
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IObit Smart Defrag | =6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability CVE-2019-6493 is a kernel pointer leak in SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6.
The severity of CVE-2019-6493 is medium (5.5).
The vulnerability CVE-2019-6493 in IObit Smart Defrag 6 allows for a kernel pointer leak in the SmartDefragDriver.sys (2.0) component.
Yes, IObit has released a fix for CVE-2019-6493. Users should update to the latest version of IObit Smart Defrag.
You can find more information about CVE-2019-6493 on the CVE-2019-6493 page on the DownWithUp website.