PT-2020-12384

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to make arbitrary changes to the Components section of the Stats.ini file via the "aswTask" RPC endpoint for the TaskEx library in the Avast Service...

CVE-2020-10865: Inclusion of Functionality from Untrusted Control Sphere

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to make arbitrary changes to the Components section of the Stats.ini file via RPC from a Low Integrity process...

PT-2020-12385

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to enumerate network interfaces and access points from a Low Integrity process via RPC, specifically through the aswTask RPC endpoint for the TaskEx...

CVE-2020-10867: Exposure of Resource to Wrong Sphere

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to bypass intended access restrictions on tasks from an untrusted process, when Self Defense is enabled...

CVE-2020-10863: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...