PT-2018-2755 · Dr.Web · Dr.Web Enterprise Security Suite

Publicado

2018-12-20

·

Atualizado

2018-12-20

CVSS v2.0

7.2

Alta

VetorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite (affected versions not specified)
Description The issue is related to a component of Dr.Web Enterprise Security Suite, specifically the Dr.Web Agent, which has a flaw in its digital signature verification mechanism for executable files when establishing communication with the driver. This could allow an attacker to execute system commands by substituting a dll library and then sending control I/O codes to the Dr.Web Agent drivers.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

BDU:2019-01731

Produtos afetados

Dr.Web Enterprise Security Suite