CVE-2018-6606

An issue was discovered in MalwareFox AntiMalware 2.74.0.150

published February 4, 2018

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\.\ZemanaAntiMalware to elevate privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01186 · 67.6th percentile
Published
2018-02-04T01:00Z
EPSS history
Timeline
  • 04 FEB 01:00Z
    An issue was discovered in MalwareFox AntiMalware 2.74.0.150
    cvelistv5