CVE-2023-1186 FabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference

Low 3.3 Published 6 Mar 2023 Updated 25 Nov 2024

A local attacker can cause a denial of service via null pointer dereference in FabulaTech Webcam for Remote Desktop.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-1186?

CVE-2023-1186 is a low-severity vulnerability in FabulaTech Webcam for Remote Desktop, published on 6 Mar 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.

Weakness: CWE-476

Which versions are affected by CVE-2023-1186?

It affects 1 product.

Products include Fabulatech Webcam for Remote Desktop.

How do I fix CVE-2023-1186?

No fix has been published for CVE-2023-1186 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-1186 being exploited?

There is no known exploitation of CVE-2023-1186 in the wild and no public exploit code.

Sources

Also known as GHSA-w5gw-948h-gpgm.