CVE-2018-16720 - In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304

Back Back to CVE browser

HIGH

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304

Published Nov 23, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.32%

Description

In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x1236001c, a related issue to CVE-2018-16304.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8521
Advisory
https://github.com/bsauce/poc/tree/master/jingyun_antivirus_1236001c
x_refsource_MISCThird Party Advisory
https://www.cnvd.org.cn/flaw/show/CNVD-2018-19267
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-8521		Advisory
https://github.com/bsauce/poc/tree/master/jingyun_antivirus_1236001c		x_refsource_MISCThird Party Advisory
https://www.cnvd.org.cn/flaw/show/CNVD-2018-19267		x_refsource_MISCThird Party Advisory