CVE-2020-14955

Published: Jun 26, 2020Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440.

Affected (1)

Products: Jiangmin: Jiangmin Antivirus

Jiangmin

1 product

Jiangmin Antivirus

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jiangmin Jiangmin Antivirus	Version 16.0.13.129

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://github.com/y5s5k5/CVE-2020-14955

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/y5s5k5/CVE-2020-14955

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.