CVE-2023-1492CWE-404

Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service

Medium · published March 18, 2023

CVSS v3.1
5.5
EPSS
0%
Percentile
23.4
In the wild
Unconfirmed
What it is

A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the library MaxProc64.sys of the component IoControlCode Handler. The manipulation of the argument SystemBuffer leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-223378 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00317 · 23.4th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2023-03-18T22:31Z
EPSS history
Timeline
  • 18 MAR 22:31Z
    Max Secure Anti Virus Plus IoControlCode MaxProc64.sys 0x220019 denial of service
    cvelistv5