IObit Malware Fighter v11.0.0.1274 - DoS

Description

IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.

Vulnerability

The 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver is vulnerable to DoS, leading to a BSOD of the affected computer caused by a NULL pointer dereference.

rax=0000000000000000 rbx=0000000000000000 rcx=fffff8012ff33404
rdx=0000000000002e20 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8012ff3279e rsp=fffff68d04cca720 rbp=0000000000000000
 r8=fffff68d04cca7a8  r9=0000000000000000 r10=4141414141414141
r11=ffffca879f3d5010 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz ac po nc
ImfHpRegFilter+0x279e:
fffff801`2ff3279e 66392b          cmp     word ptr [rbx],bp ds:00000000`00000000

Our security policy

We have reserved the ID CVE-2024-0430 to refer to this issue from now on.

Disclosure policy

System Information

• Version: IObit Malware Fighter v11.0.0.1274

• Operating System: Windows

Mitigation

There is currently no patch available for this vulnerability.

References

• Vendor page https://www.iobit.com/en/index.php

• Product page https://www.iobit.com/en/malware-fighter.php