High severity · published Feb 13, 2024
CVE-2024-23439
Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
7.1
CVSS
0.2%
EPSS
No
On KEV
Description
Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VA
Vba32 Antivirus · VirusBlokAda
3.36.0 · source: vendor
VB
Vba32 · Anti-virus
3.36.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-23439
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-23439
Third Party Advisory
https://fluidattacks.com/advisories/adderley/
Product
https://www.anti-virus.by/vba32
More from Vba32 Antivirus
7.1
CVE-2024-23440
Vba32 Antivirus v3.36.0 - Arbitrary Memory Read
5.5
CVE-2024-23441
Vba32 Antivirus v3.36.0 - Denial of Service (DoS)
–
CVE-2008-5546
VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE…
–
CVE-2007-5254
VirusBlokAda Vba32 AntiVirus 3.12.2 uses weak permissions (Everyone:Write) for its installation directory, which allows local users to gain privileges by replacing application…