CVE-2023-1186

Опубликовано: 06 мар. 2023

Источник: nvd

CVSS3: 3.3

CVSS3: 5.5

CVSS2: 1.7

EPSS Низкий

Описание

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.

Ссылки

https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.222358
Third Party Advisory
https://vuldb.com/?id.222358
Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186
Exploit
Third Party Advisory
https://vuldb.com/?ctiid.222358
Third Party Advisory
https://vuldb.com/?id.222358
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:fabulatech:webcam_for_remote_desktop:2.8.42:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 16%

0.00051

Низкий

3.3 Low

CVSS3

5.5 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

GHSA-w5gw-948h-gpgm

CVSS3: 5.5

github

почти 3 года назад

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects unknown code in the library ftwebcam.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.

EPSS

Процентиль: 16%

0.00051

Низкий

3.3 Low

CVSS3

5.5 Medium

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-476