Lucene search
HistoryDec 16, 2015 - 6:59 p.m.
CVE-2015-8578
cve-2015-8578
avg internet security
memory allocation
vulnerability
exploit
dep bypass
aslr bypass
6.7 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
68.7%
AVG Internet Security 2015 allocates memory with Read, Write, Execute (RWX) permissions at predictable addresses when protecting user-mode processes, which allows attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors.
Affected configurations
Node
avginternet_securityMatch2015
| CPE | Name | Operator | Version |
|---|---|---|---|
| avg:internet_security | avg internet security | eq | 2015 |
Related
prion
prion
Design/Logic Flaw
2015-12-16 18:59:00
nessus
nessus
AVG Internet Security 2015.5736 Address Space Layout Disclosure
2016-02-24 00:00:00
cvelist
cvelist
CVE-2015-8578
2015-12-16 18:00:00
nvd
nvd
CVE-2015-8578
2015-12-16 18:59:01
6.7 Medium
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.003 Low
EPSS
Percentile
68.7%
Related for CVE-2015-8578