PT-2014-6215 · Malwarebytes · Malwarebytes Anti-Exploit+1

Published 2014-12-16 · Updated 2016-12-07 · CVE-2014-4936

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Malwarebytes Anti-Malware (MBAM) versions prior to 2.0.3 Malwarebytes Anti-Exploit (MBAE) versions prior to 1.04.1.1012

Description The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing the update server and uploading an executable. This is related to the upgrade functionality.

Recommendations For Malwarebytes Anti-Malware (MBAM) versions prior to 2.0.3, update to version 2.0.3 or later. For Malwarebytes Anti-Exploit (MBAE) versions prior to 1.04.1.1012, update to version 1.04.1.1012 or later.

Exploit

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2014-4936

Affected Products

Malwarebytes Anti-Exploit

Malwarebytes Antimalware

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/malwarebytes_update_exec.rb · Exploit
• 🔥 https://github.com/0x3a/CVE-2014-4936 · Exploit
• 🔥 https://exploit-db.com/exploits/41701 · Exploit
• 🔥 http://blog.0x3a.com/post/104954032239/cve-2014-4936-malwarebytes-anti-malware-and · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4936 · Security Note
• http://packetstormsecurity.com/files/130244/Malwarebytes-Anti-Malware-Anti-Exploit-Update-Remote-Code-Execution.html · Note