{"id":"CVE-2023-1628","state":"PUBLISHED","title":"Jianming Antivirus IoControlCode kvcore.sys null pointer dereference","description":"A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability.","publishedAt":"2023-03-25T11:00:04.340Z","updatedAt":"2025-02-19T20:29:17.536Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"VulDB"},"assigner":"VulDB","products":["Jianming Antivirus"],"affected":[{"vendor":"Jianming","product":"Antivirus","versions":[{"version":"16.2.2022.418","status":"affected"}],"modules":["IoControlCode Handler"]}],"references":["https://vuldb.com/?id.224010","https://vuldb.com/?ctiid.224010","https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30","https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/1xxx/CVE-2023-1628.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-1628","state":"PUBLISHED","datePublished":"2023-03-25T11:00:04.340Z","dateUpdated":"2025-02-19T20:29:17.536Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2023-03-25T10:06:02.177Z"},"containers":{"cna":{"title":"Jianming Antivirus IoControlCode kvcore.sys null pointer dereference","descriptions":[{"lang":"en","value":"A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. VDB-224010 is the identifier assigned to this vulnerability."},{"lang":"de","value":"Es wurde eine problematische Schwachstelle in Jianming Antivirus 16.2.2022.418 entdeckt. Es betrifft eine unbekannte Funktion in der Bibliothek kvcore.sys der Komponente IoControlCode Handler. Mittels Manipulieren mit unbekannten Daten kann eine null pointer dereference-Schwachstelle ausgenutzt werden. Der Angriff hat dabei lokal zu erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"Jianming","product":"Antivirus","versions":[{"version":"16.2.2022.418","status":"affected"}],"modules":["IoControlCode Handler"]}],"references":[{"url":"https://vuldb.com/?id.224010","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.224010","tags":["signature","permissions-required"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30","tags":["broken-link"]},{"url":"https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view","tags":["exploit"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.5,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.6,"vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"CWE-476 NULL Pointer Dereference"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-02-13T07:54:32.384Z"},"timeline":[{"time":"2023-03-25T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2023-03-25T00:00:00.000Z","lang":"en","value":"CVE reserved"},{"time":"2023-03-25T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2023-04-15T09:53:32.000Z","lang":"en","value":"VulDB entry last update"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.224010","tags":["vdb-entry","technical-description","x_transferred"]},{"url":"https://vuldb.com/?ctiid.224010","tags":["signature","permissions-required","x_transferred"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned30","tags":["broken-link","x_transferred"]},{"url":"https://drive.google.com/file/d/1Div9mElTdsluLrU2etziLYqmXcqQFj1j/view","tags":["exploit","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T05:57:25.268Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-19T20:29:03.877500Z","id":"CVE-2023-1628","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-02-19T20:29:17.536Z"}}]}}}