CVE-2023-1444: filseclab twister_antivirus Improper Resource Shutdown or Release

Vulnerability summary

CVE-2023-1444 is a high (CVSS 7.8) Improper Resource Shutdown or Release vulnerability in filseclab twister_antivirus. EPSS estimates a 1.32% chance of exploitation in the next 30 days, higher than 70.4% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 17-03-2023
   PublishedVulnerability first disclosed.
2. 26-02-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223289 was assigned to this vulnerability.

• CWE-404Improper Resource Shutdown or ReleaseThe product does not release or incorrectly releases a resource before it is made available for re-use.
• CWE-476NULL Pointer DereferenceThe product dereferences a pointer that it expects to be valid but is NULL.