CVE-2023-1490
Summary
| CVE | CVE-2023-1490 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-03-18 22:15:00 UTC |
| Updated | 2023-11-07 04:03:00 UTC |
| Description | A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDActMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223376. |
Risk And Classification
Problem Types: CWE-284
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Maxpcsecure | Anti Virus Plus | 19.0.2.1 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| WindowsKernelVuln/unassigned20 at master · zeze-zeze/WindowsKernelVuln · GitHub | MISC | github.com | |
| Login required | MISC | vuldb.com | |
| drive.google.com/file/d/1PmzG42vFkqpwfgTG0KACzyH8oA7OddWG/view | MISC | drive.google.com | |
| Login required | MISC | vuldb.com | |
| WindowsKernelVuln/CVE-2023-1490 at master · zeze-zeze/WindowsKernelVuln · GitHub | MISC | github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.