CVE-2018-5701 In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
CriticalCVSS 9.8
EPSS 18.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iolo system shield | = 5.0.0.136 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 43929 exploit third-party-advisory vdb-entry
- www.greyhathacker.net exploit third-party-advisory