PT-2020-12383

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to trigger a reboot via RPC from a Low Integrity process by exploiting the aswTask RPC endpoint for the TaskEx library in the Avast Service...

PT-2020-12386

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to bypass intended access restrictions on tasks from an untrusted process when Self Defense is enabled, by exploiting the aswTask RPC endpoint for t...

CVE-2020-10865: Inclusion of Functionality from Untrusted Control Sphere

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process...

CVE-2020-10864: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...

CVE-2020-10868: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to launch the Repair App RPC call from a Low Integrity process...