CVE-2023-1007: Twister Antivirus IoControlCode filmfd.sys 0x801120E4 access control

Published Feb 24, 2023

Updated

A vulnerability was found in Twister Antivirus 8.17. It has been declared as critical. This vulnerability affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221740.

Affected Software

1 affected component

Filseclab Twister Antivirus=8.17

Remediation

Patch Available

https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1007

Event History

Feb 24, 2023

CVE Published

10:23 AM

Data Sourced

10:23 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-1007?

CVE-2023-1007 has been declared as critical.

How do I fix CVE-2023-1007?

To mitigate CVE-2023-1007, ensure that Twister Antivirus 8.17 is updated to the latest version provided by the vendor.

What component is affected by CVE-2023-1007?

CVE-2023-1007 affects the function 0x801120E4 in the library filmfd.sys within the IoControlCode Handler.

What type of vulnerability is CVE-2023-1007?

CVE-2023-1007 is characterized by improper access controls.

Is CVE-2023-1007 specific to any software version?

Yes, CVE-2023-1007 specifically affects Twister Antivirus version 8.17.