PT-2017-18275 · Avast · Avast Antivirus

Publicado 2017-04-27 · Atualizado 2019-10-03 · CVE-2017-8308

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 17

Description The issue allows an unprivileged user, or potentially malware, to mark any process as trusted, bypassing the Self-Defense feature. This could lead to subsequent attacks on various components of the Avast product.

Recommendations For versions prior to 17, update to version 17 or later to resolve the issue.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-8308

Produtos afetados

Avast Antivirus

Referências · 4

• 🔥 https://trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Avast-Antivirus/?fid=9201 · Exploit
• http://securityfocus.com/bid/98084 · Nota
• https://osv.dev/vulnerability/CVE-2017-8308 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-8308 · Nota de Segurança