{"id":"CVE-2023-1008","aliases":["EUVD-2023-23300","GHSA-rhff-447q-6q4p"],"status":"published","title":"Twister Antivirus IoControlCode filmfd.sys 0x801120E4 denial of service","description":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00374,"percentile":0.31669,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-404"],"published":"2023-02-24T10:24:01Z","modified":"2026-06-17T05:26:53Z","products":[{"vendor":"avast","product":"antivirus"},{"vendor":"filseclab","product":"twister_antivirus"},{"vendor":"twister","product":"antivirus"}],"references":[{"url":"https://vuldb.com/?id.221741","tags":["vdb-entry","technical-description","x_transferred","Third Party Advisory"]},{"url":"https://vuldb.com/?ctiid.221741","tags":["signature","permissions-required","x_transferred","Permissions Required","Third Party Advisory"]},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1008","tags":["related","x_transferred","Exploit","Patch","Third Party Advisory"]},{"url":"https://drive.google.com/file/d/1fdQWJ1uvXELnXnDm2Jk81bA0fwwqQCpY/view?usp=sharing","tags":["exploit","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1008"},{"url":"https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned1"},{"url":"https://github.com/advisories/GHSA-rhff-447q-6q4p"}],"sources":{"cve":[{"id":"CVE-2023-1008","title":"Twister Antivirus IoControlCode filmfd.sys 0x801120E4 denial of service","description":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.","status":"published","published":"2023-02-24T10:24:01.015Z","modified":"2024-08-02T05:32:46.252Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","assessor":"cna"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:35:32.019713Z"}],"euvd":[{"id":"EUVD-2023-23300","description":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.","status":"published","published":"2023-02-24T10:24:01Z","modified":"2024-08-02T05:32:46Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:16.011444Z"}],"ghsa":[{"id":"GHSA-rhff-447q-6q4p","title":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue...","description":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects some unknown processing in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.","status":"published","published":"2023-02-24T12:31:20Z","modified":"2023-03-03T18:30:26Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:54:16.14777Z"}],"nvd":[{"id":"CVE-2023-1008","description":"A vulnerability was found in Twister Antivirus 8.17. It has been rated as problematic. This issue affects the function 0x801120E4 in the library filmfd.sys of the component IoControlCode Handler. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The identifier VDB-221741 was assigned to this vulnerability.","status":"published","published":"2023-02-24T11:15:10.91Z","modified":"2026-06-17T05:26:53.013Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:S/C:N/I:N/A:C","level":"medium","assessor":"secondary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:47.623983Z"}]}}