PT-2024-31233 · Malwarebytes · Malwarebytes Premium Security

Published 2024-10-01 · Updated 2024-10-04 · CVE-2024-44744

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Malwarebytes Premium Security version 5.0.0.883

Description An issue in Malwarebytes Premium Security allows attackers to execute arbitrary code via placing crafted binaries into unspecified directories. It is noted that this issue requires admin privileges and that the contents cannot be altered by non-admin users.

Recommendations For Malwarebytes Premium Security version 5.0.0.883, consider restricting access to the directories where crafted binaries can be placed, as a temporary workaround, until a patch is available. Additionally, ensure that only authorized admin users have access to these directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-44744

Affected Products

Malwarebytes Premium Security

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-44744 · Security Note
• https://twitter.com/VulmonFeeds/status/1841238147692109901 · Twitter Post
• https://googleprojectzero.blogspot.com/2016/02/the-definitive-guide-on-win32-to-nt.html · Note
• https://medium.com/%40danielshaulov01/malwarebytes-premium-security-av-bypass-cve-2024-44744-97bb6192ed4a · Note
• https://twitter.com/CVEnew/status/1841113708308611405 · Twitter Post
• https://t.me/cvedetector/6750 · Telegram Post
• https://t.me/cvenotify/97091 · Telegram Post