IObit Malware Fighter

IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.

IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder.

IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow

IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

IMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL 0x8016E000 along with a user defined string to a file; that file will be promptly deleted regardless of access controls.

IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service

IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service

IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service

IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service

IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service

IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service

IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service

IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service

An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS).

IObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link.