Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-5235 State: PUBLISHED Published: 2018-08-22T17:00:00Z Last Updated: 2024-09-16T20:31:27.130Z Vendors: Symantec Corporation Products: Norton Utilities Problem Types: DLL Preloading Description: Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running unde
ility can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105099 - https://support.symantec.com/en_US/article.SYMSA1459.html
CVE ID: CVE-2018-5236 State: PUBLISHED Published: 2018-06-20T16:00:00Z Last Updated: 2024-09-17T00:46:52.311Z Vendors: Symantec Corporation Products: Symantec Endpoint Protection Problem Types: Race condition Description: Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104198 - http://www.securitytracker.com/id/1041180 - https://support.symantec.com/en_US/article.SYMSA1454.html
CVE ID: CVE-2018-5237 State: PUBLISHED Published: 2018-06-20T16:00:00Z Last Updated: 2024-09-17T00:30:52.218Z Vendors: Symantec Corporation Products: Symantec Endpoint Protection Problem Types: Privilege escalation Description: Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104199 - http://www.securitytracker.com/id/1041180 - https://support.symantec.com/en_US/article.SYMSA1454.html
CVE ID: CVE-2018-5238 State: PUBLISHED Published: 2018-08-22T17:00:00Z Last Updated: 2024-09-17T00:21:49.834Z Vendors: Symantec Corporation Products: Norton Power Eraser, SymDiag Problem Types: DLL Preloading Description: Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write
c search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/en_US/article.SYMSA1459.html - http://www.securityfocus.com/bid/105100
CVE ID: CVE-2018-5239 State: PUBLISHED Published: 2018-07-16T17:00:00Z Last Updated: 2024-09-16T22:56:30.642Z Vendors: Symantec Corporation Products: Norton App Lock Problem Types: App Lock Bypass Description: Norton App Lock prior to v1.3.0.332 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104693 - https://support.symantec.com/en_US/article.SYMSA1455.html
CVE ID: CVE-2018-5240 State: PUBLISHED Published: 2018-07-25T16:00:00Z Last Updated: 2024-09-16T18:08:37.116Z Vendors: Symantec Corporation Products: Inventory Plugin for Symantec Management Agent Problem Types: Privilege Escalation Description: The Inventory Plugin for Symantec Management Agent prior to 7.6 POST HF7, 8.0 POST HF6, or 8.1 RU7 may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104753 - https://support.symantec.com/en_US/article.SYMSA1456.ht
ntainer: References: - http://www.securityfocus.com/bid/104753 - https://support.symantec.com/en_US/article.SYMSA1456.html - http://www.securitytracker.com/id/1041654
CVE ID: CVE-2018-5241 State: PUBLISHED Published: 2018-05-29T13:00:00Z Last Updated: 2024-09-17T03:28:24.667Z Vendors: Symantec Corporation Products: Advanced Secure Gateway (ASG), ProxySG Problem Types: Authentication bypass Description: Symantec Advanced Secure Gateway (ASG) 6.6 and 6.7, and ProxySG 6.5, 6.6, and 6.7 are susceptible to a SAML authentication bypass vulnerability. The products can be configured with a SAML authentication realm to authenticate network users in intercepted proxy traffic. When parsing SAML responses, ASG and ProxySG incorrectly handle XML nodes with comments. A remote attacker can modify a valid SAML response without invalidating its cryptographic signature. Th
s with comments. A remote attacker can modify a valid SAML response without invalidating its cryptographic signature. This may allow the attacker to bypass user authentication security controls in ASG and ProxySG. This vulnerability only affects authentication of network users in intercepted traffic. It does not affect administrator user authentication for the ASG and ProxySG management consoles. Additional Analyst Notes: - CVE Program Container: References: - https://www.symantec.com/security-center/network-protection-security-advisories/SA167 - http://www.securitytracker.com/id/1040993 - http://www.securityfocus.com/bid/104282
CVE ID: CVE-2018-5242 State: PUBLISHED Published: 2018-06-13T16:00:00Z Last Updated: 2024-09-17T02:02:41.881Z Vendors: Symantec Corporation Products: Norton App Lock Problem Types: App Lock Bypass Description: Norton App Lock prior to version 1.3.0.329 can be susceptible to a bypass exploit. In this type of circumstance, the exploit can allow the user to circumvent the app to prevent it from locking the device, thereby allowing the individual to gain device access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104414 - https://support.symantec.com/en_US/article.SYMSA1453.html
CVE ID: CVE-2018-5243 State: PUBLISHED Published: 2018-08-20T18:00:00Z Last Updated: 2024-09-16T17:24:18.090Z Vendors: Symantec Corporation Products: Symantec Encryption Management Server (SEMS) Problem Types: Denial of service Description: The Symantec Encryption Management Server (SEMS) product, prior to version 3.4.2 MP1, may be susceptible to a denial of service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network. Additional Analyst Notes: - CVE Program Container: References: - https://suppor
ces of a specific host within a network. Additional Analyst Notes: - CVE Program Container: References: - https://support.symantec.com/en_US/article.SYMSA1458.html - http://www.securitytracker.com/id/1041527 - http://www.securityfocus.com/bid/105062
CVE ID: CVE-2018-5244 State: PUBLISHED Published: 2018-01-05T18:00:00 Last Updated: 2024-08-05T05:33:43.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-06 - http://www.securityfocus.com/bid/102433 - http://www.securitytracker.com/id/1040774 - https://xenbits.xen.org/xsa/ad
6 - http://www.securityfocus.com/bid/102433 - http://www.securitytracker.com/id/1040774 - https://xenbits.xen.org/xsa/advisory-253.html
CVE ID: CVE-2018-5246 State: PUBLISHED Published: 2018-01-05T19:00:00 Last Updated: 2024-08-05T05:33:43.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102469 - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/929
CVE ID: CVE-2018-5247 State: PUBLISHED Published: 2018-01-05T19:00:00 Last Updated: 2024-08-05T05:33:42.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/928
CVE ID: CVE-2018-5248 State: PUBLISHED Published: 2018-01-05T19:00:00 Last Updated: 2024-08-05T05:33:42.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/3681-1/ - https://github.com/ImageMagick/ImageMagick/issues/927 - http://www.securityfocus.com/bid/102431 - https://www.debian.org/security/2018/dsa-4245 - https://www.debian.org/security/2018/dsa-4204
CVE ID: CVE-2018-5249 State: PUBLISHED Published: 2018-01-05T20:00:00 Last Updated: 2024-08-05T05:33:44.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/shaarli/Shaarli/releases/tag/v0.8.5 - https://github.com/shaarli/Shaarli/pull/1046 - https://github.com/shaarli/Shaarli/releases/tag/v0.9.3
CVE ID: CVE-2018-5251 State: PUBLISHED Published: 2018-01-05T20:00:00 Last Updated: 2024-08-05T05:33:43.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/03/msg00008.html - https://github.com/libming/libming/issues/97 - https://security.gentoo.org/glsa/201904-24
CVE ID: CVE-2018-5252 State: PUBLISHED Published: 2018-01-05T21:00:00Z Last Updated: 2024-09-17T04:09:17.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jsummers/imageworsener/issues/34
CVE ID: CVE-2018-5253 State: PUBLISHED Published: 2018-01-05T21:00:00Z Last Updated: 2024-09-16T20:06:23.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/axiomatic-systems/Bento4/issues/233
CVE ID: CVE-2018-5254 State: PUBLISHED Published: 2018-04-12T21:00:00 Last Updated: 2024-08-05T05:33:43.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices/security-advisories/4403-security-advisory-33
CVE ID: CVE-2018-5255 State: PUBLISHED Published: 2018-03-05T18:00:00 Last Updated: 2024-08-05T05:33:44.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart) via crafted UDP packets. Additional Analyst Notes: - CVE Program Container: References: - https://www.arista.com/en/support/advisories-notices/security-advisories/4347-security-advisory-32
CVE ID: CVE-2018-5256 State: PUBLISHED Published: 2018-05-18T15:00:00 Last Updated: 2024-08-05T05:33:43.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kubernetes/ which is accessible without authentication to Tectonic and allows an attacker to directly connect to the kubernetes API server. Unauthenticated users are able to list all Namespaces through the Console, resulting in an information disclosure. Tectonic's exposure of an unauthenticated API endpoint containing information regarding the internal state of the cluster can provide an atta
f an unauthenticated API endpoint containing information regarding the internal state of the cluster can provide an attacker with information that may assist in other attacks against the cluster. For example, an attacker may not have the permissions required to list all namespaces in the cluster but can instead leverage this vulnerability to enumerate the namespaces and then begin to check each namespace for weak authorization policies that may allow further escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://coreos.com/blog/tectonic-namespace-information-disclosure-vulnerability-patched - https://coreos.com/tectonic/releases/#1.8.4-tectonic.3
CVE ID: CVE-2018-5258 State: PUBLISHED Published: 2018-01-17T17:00:00 Last Updated: 2024-08-05T05:33:43.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/rlaneth/d2203c206d5d5acbdaf6069e78b1d07f - https://www.tecmundo.com.br/seguranca/126192-banco-neon-falha-permite-hacker-acesse-conta-roube-dados-clientes.htm - https://radialle.com/cve-2018-5258-writeup-aplicativo-do-banco-neon-para-ios-n%C3%A3o-valida-certif
dados-clientes.htm - https://radialle.com/cve-2018-5258-writeup-aplicativo-do-banco-neon-para-ios-n%C3%A3o-valida-certificados-ssl-84bed0b0cecb
CVE ID: CVE-2018-5259 State: PUBLISHED Published: 2018-01-08T09:00:00 Last Updated: 2024-08-05T05:33:43.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://gitee.com/ComsenzDiscuz/DiscuzX/issues/IH8SA - http://www.whsgwl.net/text.php?textid=3
CVE ID: CVE-2018-5261 State: PUBLISHED Published: 2018-02-02T21:00:00 Last Updated: 2024-08-05T05:33:43.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for the encryption key used for the encryption of the rest of the session, the server and client disclose sensitive information, such as the authentication credentials, to any man-in-the-middle (MiTM) listener. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitsadmin/exploits/tree/master/CVE-2018-5261
CVE ID: CVE-2018-5262 State: PUBLISHED Published: 2018-01-12T17:00:00 Last Updated: 2024-08-05T05:33:43.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in the context of a highly privileged account. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/43478/ - http://packetstormsecurity.com/files/145825/DiskBoss-Enterprise-8.8.16-Buffer-Overflow.html
CVE ID: CVE-2018-5263 State: PUBLISHED Published: 2018-01-08T23:00:00 Last Updated: 2024-08-05T05:33:44.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS. Additional Analyst Notes: - CVE Program Container: References: - https://stackideas.com/blog/easydiscuss4021-update - https://www.exploit-db.com/exploits/43488/
CVE ID: CVE-2018-5264 State: PUBLISHED Published: 2019-06-07T15:26:24 Last Updated: 2024-08-05T05:33:43.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubiquiti UniFi 52 devices, when Hotspot mode is used, allow remote attackers to bypass intended restrictions on "free time" Wi-Fi usage by sending a /guest/s/default/ request to obtain a cookie, and then using this cookie in a /guest/s/default/login request with the byfree parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.red4sec.com/cve/unifi.txt
CVE ID: CVE-2018-5265 State: PUBLISHED Published: 2019-06-07T14:59:43 Last Updated: 2024-08-05T05:33:44.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://www.red4sec.com/cve/edgerouter_lite.txt
CVE ID: CVE-2018-5266 State: PUBLISHED Published: 2018-01-08T03:00:00 Last Updated: 2024-08-05T05:33:43.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html
CVE ID: CVE-2018-5267 State: PUBLISHED Published: 2018-01-08T03:00:00 Last Updated: 2024-08-05T05:33:43.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cobham Sea Tel 121 build 222701 devices allow remote attackers to bypass authentication via a direct request to MenuDealerGx.html, MenuDealer.html, MenuEuNCGx.html, MenuEuNC.html, MenuSysGx.html, or MenuSys.html. Additional Analyst Notes: - CVE Program Container: References: - http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html
CVE ID: CVE-2018-5268 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html - http://www.securityfocus.com/bid/106945 - https://github.com/opencv/opencv/issues/10541 - https://lists.debian.org/debian-lts-announce/2018/04/msg00019.html - https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
CVE ID: CVE-2018-5269 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html - http://www.securityfocus.com/bid/106945 - https://lists.debian.org/debian-lts-announce/2018/04/msg00019.html - https://github.com/opencv/opencv/issues/10540 - https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
CVE ID: CVE-2018-5270 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e010. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x
: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e010
CVE ID: CVE-2018-5271 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:44.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e008. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102471 - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_P
: References: - http://www.securityfocus.com/bid/102471 - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e008
CVE ID: CVE-2018-5272 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:44.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e004. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e004
CVE ID: CVE-2018-5273 State: PUBLISHED Published: 2018-01-08T05:00:00 Last Updated: 2024-08-05T05:33:43.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e014. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e014