| عنوان | IObit Malware Fighter 13.2.0 Insecure Permissions in Driver |
|---|
| الوصف | A driver in IObit Malware Fighter version 13.2.0 does not apply secure permissions, allowing for arbitrary file delete. This can lead to Local Privilege Escalation, through DLL sideloading after using the driver to delete a DLL loaded by the high integrity process owned by IoBit Malware Fighter. It bypasses the previous patch that blocked this exploit. The full writeup is available here. https://nathan2.com/posts/iobit/. The working POC is available on github here. https://github.com/nasawyer7/IObitDriverav. |
|---|
| المصدر | ⚠️ https://github.com/nasawyer7/IObitDriverav |
|---|
| المستخدم | nathan2 (UID 97052) |
|---|
| ارسال | 14/05/2026 06:41 PM (5 أشهر منذ) |
|---|
| الاعتدال | 14/06/2026 01:43 PM (1 month later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 370844 [IObit Malware Fighter حتى 13.2.0 DLL تجاوز الصلاحيات] |
|---|
| النقاط | 20 |
|---|