CVEvulnerability
CVE-2023-0907
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-02-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:M/C:N/I:N/A:C
- Weaknesses
- CWE-404
Description
A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is the function 0x220017 in the library ffsmon.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-221456.
Affected configurations
• filseclab twister antivirus 8.17
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0907 Third Party Advisory
- https://vuldb.com/?ctiid.221456 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221456 Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-0907 Third Party Advisory
- https://vuldb.com/?ctiid.221456 Permissions Required, Third Party Advisory
- https://vuldb.com/?id.221456 Third Party Advisory