CVE-2018-5701

critical

Description

In Iolo System Shield AntiVirus and AntiSpyware 5.0.0.136, the amp.sys driver file contains an Arbitrary Write vulnerability due to not validating input values from IOCtl 0x00226003.

References

Advisories
More

https://www.exploit-db.com/exploits/43929/

http://packetstormsecurity.com/files/146165/System-Shield-5.0.0.136-Privilege-Escalation.html

https://www.greyhathacker.net/?p=1006

Details

Source: Mitre, NVD

Published: 2018-01-31

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H