EUVD-2022-51647

Malicious code in bioql PyPI...

The vulnerability of the detection and prevention mechanism for malicious scripts in Avast Script Shield arises from the possibility of the operation exceeding the buffer in memory. This allows attackers to bypass the sandbox protection mechanisms or trigger a service failure.

The vulnerability of the detection and prevention mechanism of Avast Script Shield lies in the fact that the operation escapes the buffer in memory during the loading of the aswjsflt.dll library. Exploiting this vulnerability can allow a malicious actor to bypass the sandbox’s security mechanisms...

CVE-2022-4291

CVE-2022-4291 affects Avast Antivirus on Windows via the aswjsflt.dll in the Script Shield component, where a heap corruption could allow bypassing the application sandbox. The issue was fixed in Script Shield 18.0.1478. Some sources also note that the vulnerability could cause a Mozilla Firefox ...