Skip to main content

Superantispyware CVE-2024-0788

MEDIUM
Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection') (CWE-96)
2024-01-29 help@fluidattacks.com
Denial Of Service Superantispyware
6.6
CVSS 3.1 · Vendor: fluidattacks
Share

Severity by source

Vendor (fluidattacks) PRIMARY
6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Primary rating from Vendor (fluidattacks) · only source for this CVE.

CVSS VectorVendor: fluidattacks

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
High

Lifecycle Timeline

1
CVE Published
Jan 29, 2024 - 17:15 cve.org
MEDIUM 6.6

DescriptionCVE.org

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver.

AnalysisAI

SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver. Rated medium severity (CVSS 6.6), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-96. SUPERAntiSpyware Pro X v10.0.1260 is vulnerable to kernel-level API parameters manipulation and Denial of Service vulnerabilities by triggering the 0x9C402140 IOCTL code of the saskutil64.sys driver. Affected products include: Realdefen Superantispyware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Superantispyware

View all
CVE-2018-6476 CRITICAL POC
9.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, the SASKUTIL.SYS driver allows privilege escalation to NT AUTHORITY\SYS
CVE-2018-6475 HIGH POC
7.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, SUPERAntiSpyware.exe allows DLL hijacking, leading to Escalation of Pri
CVE-2018-6474 HIGH POC
7.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of

CVE-2018-6473 HIGH POC
7.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of

CVE-2018-6472 HIGH POC
7.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of

CVE-2018-6471 HIGH POC
7.8 Jan 31

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file (SASKUTIL.SYS) allows local users to cause a denial of

Same weakness CWE-96 – Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')

View all
CVE-2015-2079 CRITICAL POC
9.9
CVE-2022-0895 CRITICAL POC
9.8
CVE-2020-6144 CRITICAL POC
9.8
CVE-2020-6143 CRITICAL POC
9.8
CVE-2024-55877 HIGH POC
8.8
CVE-2024-55662 HIGH POC
8.8
CVE-2023-39726 CRITICAL
9.8
CVE-2025-30091 CRITICAL
9.4

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2024-0788 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy