CVE-2024-12660: IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E018 null pointer dereference
First published: Mon Dec 16 2024(Updated: )
A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the function 0x8001E018 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IObit Advanced SystemCare | <=17.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-12660?
CVE-2024-12660 has been declared as problematic due to a vulnerability in IObit Advanced SystemCare Ultimate.
How do I fix CVE-2024-12660?
To fix CVE-2024-12660, users should upgrade to a later version of IObit Advanced SystemCare Ultimate beyond 17.0.0.
What components are affected by CVE-2024-12660?
CVE-2024-12660 affects the AscRegistryFilter.sys library, particularly the IOCTL Handler function.
What kind of manipulation does CVE-2024-12660 allow?
CVE-2024-12660 allows manipulation that leads to a null pointer dereference, which can cause unexpected behavior.
Who is affected by CVE-2024-12660?
Users of IObit Advanced SystemCare Ultimate up to version 17.0.0 are affected by CVE-2024-12660.
- agent/title
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/iobit
- canonical/iobit advanced systemcare
- version/iobit advanced systemcare/17.0.0