CVEvulnerability
CVE-2023-1640
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-03-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-404
Description
A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224020.
Affected configurations
• iobit malware fighter 9.4.0.776
Related
Weakness · CWE (1)
- CWE-404 Improper Resource Shutdown or Release weakness
References
- https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view Product, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224020 Third Party Advisory
- https://vuldb.com/?id.224020 Third Party Advisory
- https://drive.google.com/file/d/1AcwSxTA0_zh7mmxU5J8WphRqg_mQsO-g/view Product, Third Party Advisory
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1640 Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.224020 Third Party Advisory
- https://vuldb.com/?id.224020 Third Party Advisory