PT-2019-14944 · Avast+1 · Avast!+1

Publicado 2019-10-21 · Atualizado 2021-07-21 · CVE-2019-17093

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast antivirus versions prior to 19.8 AVG antivirus versions prior to 19.8

Description A DLL Preloading vulnerability allows an attacker to implant %WINDIR%system32wbemcomn.dll, which is loaded into a Protected Process Light (PPL) and might bypass some of the self-defense mechanisms. This affects all components that use WMI, e.g., AVGSvc.exe and TuneupSmartScan.dll.

Recommendations For Avast antivirus versions prior to 19.8, update to version 19.8 or later. For AVG antivirus versions prior to 19.8, update to version 19.8 or later. As a temporary workaround, consider restricting access to the vulnerable components that use WMI, such as AVGSvc.exe and TuneupSmartScan.dll, until a patch is available.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-17093

Produtos afetados

Avg

Avast!

Referências · 6

• 🔥 https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses · Exploit
• https://safebreach.com/blog · Nota
• https://t.me/rnetsec/10715 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-17093 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-17093 · Aviso do Fabricante
• https://t.me/defcon_news/27902 · Publicação no Telegram