CVE-2018-5701

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

18.45% chance of exploitation in the next 30 days, 97th percentile

Published

2018-01-31

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://www.greyhathacker.net/?p=1006

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/51044
• https://www.exploit-db.com/exploits/43929

Security advisories

• http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation…

References

• CVE Record
• NVD entry