Skip to main content

Jiangmin Antivirus CVE-2023-1627

MEDIUM
Improper Resource Shutdown or Release (CWE-404)
2023-03-25 cna@vuldb.com
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Mar 25, 2023 - 12:15 nvd
MEDIUM 5.5

DescriptionNVD

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability.

AnalysisAI

A vulnerability was found in Jianming Antivirus 16.2.2022.418. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-404. A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier VDB-224009 was assigned to this vulnerability. Affected products include: Jiangmin Jiangmin Antivirus.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2012-1461 MEDIUM
4.3 Mar 21

The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5

CVE-2012-1459 MEDIUM
4.3 Mar 21

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7,

CVE-2012-1425 MEDIUM
4.3 Mar 21

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsis

CVE-2012-1457 MEDIUM
4.3 Mar 21

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast!. Rated medium severity (CVSS 4.3), t

CVE-2012-1443 MEDIUM
4.3 Mar 21

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVir

CVE-2023-1626 HIGH POC
7.8 Mar 25

A vulnerability was found in Jianming Antivirus 16.2.2022.418. Rated high severity (CVSS 7.8), this vulnerability is low

CVE-2023-1629 HIGH POC
7.8 Mar 25

A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Rated high severity (CVSS 7.8), th

CVE-2023-1631 MEDIUM POC
5.5 Mar 25

A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. Rated medium severi

CVE-2023-1630 MEDIUM POC
5.5 Mar 25

A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Rated medium s

CVE-2023-1628 MEDIUM POC
5.5 Mar 25

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Rated medium severity (CVS

CVE-2020-14955 MEDIUM POC
5.5 Jun 26

In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or

CVE-2012-1456 MEDIUM
4.3 Mar 21

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, Comodo Antivirus 7424, Emsisoft

Share

CVE-2023-1627 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy