Max Secure Anti Virus 19.0.3.019 Driver MaxProtector32.sys input validation

Summaryinfo

A vulnerability marked as critical has been reported in Max Secure Anti Virus 19.0.3.019. Affected by this vulnerability is an unknown functionality in the library MaxProtector32.sys of the component Driver. Performing a manipulation results in input validation. This vulnerability is identified as CVE-2018-6208. The attack is only possible with local access. There is not any exploit available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Max Secure Anti Virus 19.0.3.019 (Anti-Malware Software). This affects an unknown code in the library MaxProtector32.sys of the component Driver. The manipulation with an unknown input leads to a input validation vulnerability. CWE is classifying the issue as CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

In Max Secure Anti Virus 19.0.3.019,, the driver file (MaxProtector32.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22000d.

The bug was discovered 01/24/2018. The weakness was released 01/25/2018 (Website). It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2018-6208 since 01/24/2018. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 12/27/2019).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Entries connected to this vulnerability are available at VDB-112432, VDB-112430, VDB-112428 and VDB-112429. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Anti-Malware Software

Vendor

• Max Secure

Name

• Anti Virus

Version

• 19.0.3.019

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion