Vulnerability Details CVE-2022-37771
IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.4%
CVSS Severity
CVSS v3 Score 6.7
References
- https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/
- https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.html
- https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/
- https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.html
Products affected by CVE-2022-37771
-
cpe:2.3:a:iobit:malware_fighter:9.2
-
cpe:2.3:o:microsoft:windows:-