Submit #102819: Max Secure Anti Virus Plus SDActMon.sys, DoSinfo

TitleMax Secure Anti Virus Plus SDActMon.sys, DoS
DescriptionMax Secure Anti Virus Plus x.x.x.x, SDActMon.sys x.x.x.x, DoS https://www.maxpcsecure.com/download.htm Impact: Denial of Service Description: From IoControlCode 0x220019, a normal user can cause DoS due to the lack of validating SystemBuffer. Reproduce: In the attached file DoS.zip, there are DoS.exe, DoS.cpp, MaxAVPlusDM.exe, and SDActMon.sys. DoS.exe is the PoC to cause BSOD where MaxAVPlusDM.exe which contains the vulnerable driver SDActMon.sys is installed, and DoS.cpp is the source code of DoS.exe. To reproduce the issue, just install MaxAVPlusDM.exe and execute DoS.exe. It is expected that the system will crash (BSOD) once DoS.exe is executed. Password for attachment: DoS   https://drive.google.com/file/d/1-7i0tpsq9Ys4Jbf66absd2_WrOkHI5PX/view?usp=sharing
Source⚠️ https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned19
User
 Zeze7w (UID 40823)
Submission03/17/2023 14:55 (3 years ago)
Moderation03/18/2023 21:19 (1 day later)
StatusDuplicate
VulDB entry112427 [Max Secure Anti Virus 19.0.3.019 Driver SDActMon.sys input validation]
Points0

Interested in the pricing of exploits?

See the underground prices here!