VYPR
High severity7.8NVD Advisory· Published Oct 19, 2018· Updated Jun 17, 2026

CVE-2018-18026

CVE-2018-18026

Description

IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of service or code execution attack.

Affected products

2
  • cpe:2.3:a:iobit:malware_fighter:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:iobit:malware_fighter:*:*:*:*:*:*:*:*range: <=6.2
    • (no CPE)range: <=6.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.