CVE-2024-0430

IObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)

View on CVE.org

Published Jan 22, 2024 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

IObit

IObit Malware Fighter

unknown

Version	Status	Constraints
`11.0.0.1274`	affected	—

Configuration 1 [-]

cpe:2.3:a:iobit:malware_fighter:11.0.0.1274:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2024-16225	IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.238% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://fluidattacks.com/advisories/davis/
https://www.iobit.com/en/malware-fighter.php

History

Nov 13, 2024 4:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sep 5, 2024 10:30 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses	CWE-400

Sep 5, 2024 10:15 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-476

Subscriptions

Iobit Malware Fighter

Weaknesses

Sources

CVE record Updated: Nov 13, 2024, 3:32 PM

Status: PUBLISHED
Assigner: Fluid Attacks
Published: Jan 22, 2024, 6:43 PM
Updated: Nov 13, 2024, 3:32 PM
Reserved: Jan 11, 2024, 3:48 PM

View source JSON

Vulnrichment Updated: Aug 1, 2024, 6:04 PM

Updated: Aug 1, 2024, 6:04 PM

NVD Updated: Jun 17, 2026, 6:53 AM

Status: Modified
Published: Jan 22, 2024, 7:15 PM
Modified: Jun 17, 2026, 6:53 AM

View source JSON

Red Hat No data

No data.

OpenCVE enrichment No data

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-0430", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "state": "PUBLISHED", "assignerShortName": "Fluid Attacks", "dateReserved": "2024-01-11T15:48:03.982Z", "datePublished": "2024-01-22T18:43:29.103Z", "dateUpdated": "2024-11-13T15:32:03.208Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "platforms": ["Windows"], "product": "IObit Malware Fighter", "vendor": "IObit", "versions": [{"status": "affected", "version": "11.0.0.1274"}]}], "datePublic": "2024-01-16T17:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver."}], "value": "IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver."}], "impacts": [{"capecId": "CAPEC-212", "descriptions": [{"lang": "en", "value": "CAPEC-212 Functionality Misuse"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-09-05T22:02:03.432Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://fluidattacks.com/advisories/davis/"}, {"tags": ["product"], "url": "https://www.iobit.com/en/malware-fighter.php"}], "source": {"discovery": "UNKNOWN"}, "title": "IObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:04:49.705Z"}, "title": "CVE Program Container", "references": [{"tags": ["third-party-advisory", "x_transferred"], "url": "https://fluidattacks.com/advisories/davis/"}, {"tags": ["product", "x_transferred"], "url": "https://www.iobit.com/en/malware-fighter.php"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-01-25T20:40:34.633713Z", "id": "CVE-2024-0430", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-13T15:32:03.208Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://fluidattacks.com/advisories/davis/", "tags": ["third-party-advisory", "x_transferred"]}, {"url": "https://www.iobit.com/en/malware-fighter.php", "tags": ["product", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:04:49.705Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-0430", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-01-25T20:40:34.633713Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-13T15:31:13.432Z"}}], "cna": {"title": "IObit Malware Fighter v11.0.0.1274 - Denial of Service (DoS)", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-212", "descriptions": [{"lang": "en", "value": "CAPEC-212 Functionality Misuse"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "IObit", "product": "IObit Malware Fighter", "versions": [{"status": "affected", "version": "11.0.0.1274"}], "platforms": ["Windows"], "defaultStatus": "unknown"}], "datePublic": "2024-01-16T17:00:00.000Z", "references": [{"url": "https://fluidattacks.com/advisories/davis/", "tags": ["third-party-advisory"]}, {"url": "https://www.iobit.com/en/malware-fighter.php", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.", "supportingMedia": [{"type": "text/html", "value": "IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "shortName": "Fluid Attacks", "dateUpdated": "2024-09-05T22:02:03.432Z"}}}, "cveMetadata": {"cveId": "CVE-2024-0430", "state": "PUBLISHED", "dateUpdated": "2024-11-13T15:32:03.208Z", "dateReserved": "2024-01-11T15:48:03.982Z", "assignerOrgId": "84fe0718-d6bb-4716-a7e8-81a6d1daa869", "datePublished": "2024-01-22T18:43:29.103Z", "assignerShortName": "Fluid Attacks"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "platforms": ["Windows"], "product": "IObit Malware Fighter", "vendor": "IObit", "versions": [{"status": "affected", "version": "11.0.0.1274"}]}], "source": "help@fluidattacks.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:iobit:malware_fighter:11.0.0.1274:*:*:*:*:*:*:*", "matchCriteriaId": "B4ACC1A2-EB67-4512-85DC-D97DEBF741C4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver."}, {"lang": "es", "value": "IObit Malware Fighter v11.0.0.1274 es afectado por una vulnerabilidad de denegaci\u00f3n de servicio al activar el c\u00f3digo IOCTL 0x8001E00C del controlador ImfHpRegFilter.sys."}], "id": "CVE-2024-0430", "lastModified": "2026-06-17T06:53:29.550", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "help@fluidattacks.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-0430", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-01-25T20:40:34.633713Z", "version": "2.0.3"}}]}, "published": "2024-01-22T19:15:09.210", "references": [{"source": "help@fluidattacks.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://fluidattacks.com/advisories/davis/"}, {"source": "help@fluidattacks.com", "tags": ["Product"], "url": "https://www.iobit.com/en/malware-fighter.php"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://fluidattacks.com/advisories/davis/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.iobit.com/en/malware-fighter.php"}], "sourceIdentifier": "help@fluidattacks.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "help@fluidattacks.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Secondary"}]}