CVE-2019-6493: Medium severity iobit smart defrag vulnerability

Published Apr 11, 2019

Updated

SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can be leaked if the kernel pool becomes a "big" pool.

Affected Software

1 affected component

IObit Smart Defrag=6

Event History

Apr 11, 2019

CVE Published

via MITRE·07:34 PM

Data Sourced

via MITRE·07:34 PM

Description

Data Sourced

via NVD·08:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability CVE-2019-6493?

The vulnerability CVE-2019-6493 is a kernel pointer leak in SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6.

What is the severity of CVE-2019-6493?

The severity of CVE-2019-6493 is medium (5.5).

How does the vulnerability CVE-2019-6493 affect IObit Smart Defrag?

The vulnerability CVE-2019-6493 in IObit Smart Defrag 6 allows for a kernel pointer leak in the SmartDefragDriver.sys (2.0) component.

Is there a fix available for CVE-2019-6493?

Yes, IObit has released a fix for CVE-2019-6493. Users should update to the latest version of IObit Smart Defrag.

Where can I find more information about CVE-2019-6493?

You can find more information about CVE-2019-6493 on the CVE-2019-6493 page on the DownWithUp website.