PT-2019-15829 · Max Secure · Max Secure Anti Virus Plus

Published 2019-11-30 · Updated 2019-12-13 · CVE-2019-19382

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Max Secure Anti Virus Plus version 19.0.4.020

Description The issue concerns insecure permissions on the installation directory of the software. This allows local attackers to replace .exe or .dll files, potentially leading to privilege escalation.

Recommendations For Max Secure Anti Virus Plus version 19.0.4.020, consider restricting access to the installation directory to prevent unauthorized modifications until a fix is available. As a temporary workaround, monitor the directory for any suspicious changes to .exe or .dll files. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-19382

Affected Products

Max Secure Anti Virus Plus

References · 5

• 🔥 http://hyp3rlinx.altervista.org · Exploit
• 🔥 http://packetstormsecurity.com/files/155506/Max-Secure-Anti-Virus-Plus-19.0.4.020-Insecure-Permissions.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19382 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19382 · Vendor Advisory
• https://t.me/defcon_news/31634 · Telegram Post