cve/2023/CVE-2023-1186.md

### [CVE-2023-1186](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1186)
![](https://img.shields.io/static/v1?label=Product&message=Webcam%20for%20Remote%20Desktop&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%202.8.42%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-476%20NULL%20Pointer%20Dereference&color=brighgreen)

### Description

A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0x222018 in the library ftwebcam.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-222358 is the identifier assigned to this vulnerability.

### POC

#### Reference
- https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/CVE-2023-1186

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/zeze-zeze/WindowsKernelVuln