CVE-2024-23440
CVSS V2 None
CVSS V3 None
Description
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer.
Overview
- CVE ID
- CVE-2024-23440
- Assigner
- Fluid Attacks
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-02-13T15:01:12.248Z
- Last Modified Date
- 2024-06-04T17:45:46.784Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://fluidattacks.com/advisories/adderley/ | third-party-advisory |
| https://www.anti-virus.by/vba32 | product |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-23440 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23440 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-26 07:11:24 | Added to TrackCVE |