Avast Antivirus (All Editions) < 19.8 DLL Preloading Vulnerability - Windows

Avast Antivirus is prone to a dll preloading vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:antivirus";...

Avast antivirus and AVG antivirus DLL hijacking vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast.AVG AntiVirus is an antivirus and anti-backdoor antivirus program.Avira Antivirus engine is an antivirus engine from the German company Avira.Avast Antivirus is a suite of antivirus software from the Czech company...

CVE-2019-17093

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process PPL and might bypass some of the self-defense mechanisms. This affects...

Authentication flaw

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process PPL and might bypass some of the self-defense mechanisms. This affects...

CVE-2019-17093

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process PPL and might bypass some of the self-defense mechanisms. This affects...

CVE-2019-17093

CVE-2019-17093 concerns Avast Antivirus (before 19.8) and AVG Antivirus (before 19.8). The issue is a DLL preloading vulnerability that enables an attacker to plant %WINDIR%\system32\wbemcomn.dll, which is then loaded into a Protected-Process Light (PPL) and may bypass some self-defense mechanism...

Avast, NordVPN Breaches Tied to Phantom User Accounts

Antivirus and security giant Avast and virtual private networking VPN software provider NordVPN each today disclosed months-long network intrusions that -- while otherwise unrelated -- shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with...

Avast Network Breached As Hackers Target CCleaner Again

Czech antivirus vendor Avast on Monday warned that hackers were able to access its internal network using a temporary VPN account. Avast said that it believes that the intrusion, first detected on Sept. 25, was likely targeting its CCleaner business in a supply chain attack. CCleaner, which is...

100s of Flashlight apps on Play Store ask for dangerous permissions

By Sudais Just now Avast has released a report that details an analysis of 937 flashlight apps on Google's Play Store and the variety of permissions that they seek which can be categorized into the following. This is a post from HackRead.com Read the original post: 100s of Flashlight apps on Play...

600,000 GPS child trackers found vulnerable to location tracking

By Sudais Avast set out to study a variety of GPS tools found on the internet and how secure they are which can be found on Amazon, Alibaba, and eBay among others. This is a post from HackRead.com Read the original post: 600,000 GPS child trackers found vulnerable to location tracking...

Meet Retadup botnet that was infected by another malware

By Sudais Meet Retadup malware botnet that was infected by another malware - Avast and French authorities have now dismantled the nasty Retadup botnet. This is a post from HackRead.com Read the original post: Meet Retadup botnet that was infected by another malware...

Dangerous Cryptomining Worm Racks Up 850K Infections, Self-Destructs

A French and U.S. law-enforcement effort has neutralized 850,000 infections by a cryptomining worm known as Retadup, by causing the threat to destroy itself. The worm has been distributing the malicious XMRig cryptocurrency miner to computers running the Windows operating system, mostly in Latin...

French Police Remotely Removed RETADUP Malware from 850,000 Infected PCs

The French law enforcement agency, National Gendarmerie, today announced the successful takedown of one of the largest wide-spread RETADUP botnet malware and how it remotely disinfected more than 850,000 computers worldwide with the help of researchers. Earlier this year, security researchers at...

Avast Antivirus Local Denial of Service Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus versions prior to 19.4. The vulnerability can be exploited to bypass the Avast self-protection mechanism and rename important binary files e.g. AvastSvc.exe file,...

CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

Code injection

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

CVE-2019-11230

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

CVE-2019-11230

CVE-2019-11230 affects Avast Antivirus prior to 19.4. A local administrator can exploit a symlink in Logs\Update.log to cause the product to rename arbitrary files. The next write to the log file renames the symlink target and can be used to rename a critical binary (e.g., AvastSvc.exe), leading ...

Adware-Ridden Apps in Google Play Infect 30 Million Android Users

More than 50 malicious apps have been discovered on the Google Play app marketplace, peddling adware to millions of Android victims. The 50 adware apps, which have been since removed, include fitness, photoshopping and gaming apps, and were installed a total of 30 million times, researchers at...