critical9.8Public exploit code
CVE-2018-5701
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- System Mechanic v15.5.0.61 - Arbitrary Read/Write2023-03-25 · local · windows
- System Shield 5.0.0.136 - Privilege Escalation2018-01-30 · local · windows
Impact
In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iolo | System Shield | Version 5.0.0.136 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/43929/
- https://www.greyhathacker.net/?p=1006
- http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.html
- https://www.exploit-db.com/exploits/43929/
- https://www.greyhathacker.net/?p=1006