Avast Antivirus Arbitrary File Deletion Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. An arbitrary file deletion vulnerability exists in versions prior to Avast Antivirus 17. An attacker can exploit this vulnerability to replace or delete arbitrary files...

CVE-2017-8307

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also...

CVE-2017-8307

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also...

Design/Logic Flaw

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also...

Code injection

In Avast Antivirus before v17, an unprivileged user and thus malware or a virus can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components...

CVE-2017-8308

In Avast Antivirus before v17, an unprivileged user and thus malware or a virus can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components...

CVE-2017-8308

In Avast Antivirus before v17, an unprivileged user and thus malware or a virus can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components...

CVE-2017-8308

CVE-2017-8308 affects Avast Antivirus before v17. An unprivileged user can mark an arbitrary process as Trusted from Avast’s perspective, bypassing Self-Defense and enabling potential further compromise of Avast components. Primary impact reported is a bypass of Self-Defense; exploitation status ...

CVE-2017-8307

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled. It is also...

CVE-2017-8308

In Avast Antivirus before v17, an unprivileged user and thus malware or a virus can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components...

CVE-2017-8307

Affected software. Avast Antivirus (before v17) on Windows. Vulnerability and root cause. The LPC interface API exposed by the AvastSVC.exe Windows service can be abused to launch predefined binaries or replace/delete arbitrary files. This arises in the context of Avast Self-Defense and can be ex...

No More Ransom — 15 New Ransomware Decryption Tools Available for Free

No More Ransom, so is the Ransomware Threat. Launched less than a year ago, the No More Ransom NMR project has increased its capacity with new partners and new decryption tools added to its now global campaign to combat Ransomware. Started as a joint initiative by Europol, the Dutch National...

Avast Pro DoubleAgent Attack Local Code Injection Vulnerability

Avast Pro is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:avastproantivirus...

Avast Internet Security DoubleAgent Attack Local Code Injection Vulnerability

Avast Internet Security is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Premier DoubleAgent Attack Local Code Injection Vulnerability

Avast Premier is prone to local code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avast:avastpremier"...

Avast Free Antivirus DoubleAgent Attack Local Code Injection Vulnerability

Avast Free Antivirus is prone to local code injection vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Multiple Avast Product DLL Load Local Code Injection Vulnerabilities

Avast Pro Antivirus and others are antivirus programs from the Czech company Avast. A local code injection vulnerability exists in several Avast products. A local attacker could use this vulnerability to execute arbitrary code in the context of a system running in an affected program to gain full...

Microsoft Application Verifier exposed 0day vulnerabilities, the impact of Trend Micro, Kaspersky, Symantec, including a large number of security products-vulnerability warning-the black bar safety net

Recently, Cybellum company found a 0-day vulnerability, can completely control most of the security product. This vulnerability is called“DoubleAgent”is a double-sided Spy, and many security vendors by DoubleAgent effects, including Avast, AVG, Avira, Bitdefender, Trend Micro, Comodo Comodo, ESET...

CVE-2017-5567

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...

Code injection

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...