CVE-2019-17093

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process PPL and might bypass some of the self-defense mechanisms. This affects...

CVE-2019-17093

CVE-2019-17093 concerns Avast Antivirus (before 19.8) and AVG Antivirus (before 19.8). The issue is a DLL preloading vulnerability that enables an attacker to plant %WINDIR%\system32\wbemcomn.dll, which is then loaded into a Protected-Process Light (PPL) and may bypass some self-defense mechanism...

CARBANAK Week Part Two: Continuing the CARBANAK Source Code Analysis

Update April 30: Following the release of our four-part CARBANAK Week blog series, many readers have found places to make the data shared in these posts actionable. We have updated this post to include some of this information. In the previous installment, we wrote about how string hashing was us...

CVE-2016-0215

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database...

Code injection

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database...

CVE-2016-0215

IBM DB2 9.7, 10.1 before FP6, and 10.5 before FP8 on AIX, Linux, HP, Solaris and Windows allow remote authenticated users to cause a denial of service daemon crash via a SELECT statement with a subquery containing the AVG OLAP function on an Oracle compatible database...

AVG AntiVirus < 17.2 Security Bypass Vulnerability - Mac OS X

AVG AntiVirus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avg:anti-virus";...

AVG AntiVirus Detection (Mac OS X SSH Login)

Detects the installed version of AVG AntiVirus on Mac OS X. The script logs in via ssh, searches for folder SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Authentication flaw

AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image aka DMG files...

CVE-2017-9977

AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image aka DMG files...

CVE-2017-9977

CVE-2017-9977 affects AVG AntiVirus for MacOS where the scan engine before 4668 may fail to scan inside disk image (DMG) files, allowing remote attackers to bypass malware detection. Root cause is the failure to scan inside DMG archives, resulting in an integrity gap where malware could evade det...

CVE-2017-9977

AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan inside disk image aka DMG files...

The vulnerability of the antivirus software AVG InternetSecurity allows a hacker to cause memory corruption.

The vulnerability of the AVG InternetSecurity antivirus software arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause memory corruption by analyzing a specially created Mach-O file...

AVG Antivirus Code Injection Vulnerability

AVG Antivirus is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:avg:anti-virus";...

Microsoft Application Verifier exposed 0day vulnerabilities, the impact of Trend Micro, Kaspersky, Symantec, including a large number of security products-vulnerability warning-the black bar safety net

Recently, Cybellum company found a 0-day vulnerability, can completely control most of the security product. This vulnerability is called“DoubleAgent”is a double-sided Spy, and many security vendors by DoubleAgent effects, including Avast, AVG, Avira, Bitdefender, Trend Micro, Comodo Comodo, ESET...

Multiple AVG Product DLL Load Local Code Injection Vulnerabilities

AVG Ultimate and others are antivirus programs from the Czech company AVG. A local code injection vulnerability exists in several AVG products. A local attacker can exploit this vulnerability to execute arbitrary code in the context of the system running in the affected program to gain full contr...

CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

Code injection

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

CVE-2017-5566

CVE-2017-5566 affects AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier. The issue is a local code-injection vulnerability (DoubleAgent) that bypasses AVG’s self-protection by abusing Windows Application Verifier DLL loading via an Imag...

CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...