CVE-2018-6625

In WatchDog Anti-Malware 2.74.186.150, the driver file (ZAMGUARD32.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002010.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.1 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:C

EPSS

0.40% chance of exploitation in the next 30 days, 33th percentile

Published

2018-02-05

Updated

2024-09-17

Proof-of-concept exploits (3)

• ZhiyuanWang-Chengdu-Qihoo360/WatchDog_AntiMalware_POC/tree/master/0x80002010
• ZhiyuanWang-Chengdu-Qihoo360/MalwareFox_AntiMalware_POC2★ · 2018-02-07
• gguaiker/MalwareFox_AntiMalware_POC2★ · 2018-02-07

References

• CVE Record
• NVD entry

Related

• CVE-2017-17795
• CVE-2017-17797
• CVE-2017-17804
• CVE-2018-12833
• CVE-2018-12838
• CVE-2018-12841