CVE-2020-8961

An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific...

Comodo Internet Security DLL Preload Vulnerability

Comodo Internet Security CIS is an Internet security suite that includes an antivirus program, personal firewall, sandbox, and host-based intrusion prevention system HIPS. A DLL preloading vulnerability in signmgr.dll 6.5.0.819 in Comodo Internet Security 12.0 and earlier can be exploited to bypa...

Avast Antivirus Local Denial of Service Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus versions prior to 19.4. The vulnerability can be exploited to bypass the Avast self-protection mechanism and rename important binary files e.g. AvastSvc.exe file,...

McAfee Total Protection (MTP) Security Restriction Bypass Vulnerability

McAfee Total Protection is a suite of antivirus software from the American company McAfee McAfee. A security vulnerability exists in the Windows client in McAfee MTP versions prior to 16.0.R18. This vulnerability can be exploited by a local attacker with specially crafted malware to bypass the...

CVE-2019-3593

CVE-2019-3593 tracks a privilege/trust vulnerability in the Windows client of McAfee Total Protection (MTP) before version 16.0.R18 . The issue allows local attackers to bypass the product’s self‑protection, tamper with policies and product files, and uninstall McAfee software via specially craft...

CVE-2019-3593: Undefined Security Weakness

Exploitation of Privilege/Trust vulnerability in Microsoft Windows client in McAfee Total Protection MTP Prior to 16.0.R18 allows local users to bypass product self-protection, tamper with policies and product files, and uninstall McAfee software without permission via specially crafted malware...

CVE-2017-5566

Code injection vulnerability in AVG Ultimate 17.1 and earlier, AVG Internet Security 17.1 and earlier, and AVG AntiVirus FREE 17.1 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any AVG process via a "DoubleAgent" attack...

CVE-2017-5565

Code injection vulnerability in Trend Micro Maximum Security 11.0 and earlier, Internet Security 11.0 and earlier, and Antivirus+ Security 11.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Trend Micro process via a...

CVE-2017-5567

Code injection vulnerability in Avast Premier 12.3 and earlier, Internet Security 12.3 and earlier, Pro Antivirus 12.3 and earlier, and Free Antivirus 12.3 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process...

CVE-2017-5565

CVE-2017-5565 affects Trend Micro products (Maximum Security, Internet Security, Antivirus+ Security 11.0 and earlier) and is a local code-injection vulnerability. The root cause described across sources is that an attacker can abuse Microsoft Application Verifier by inserting a DLL via Image Fil...

CVE-2016-4329

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism...

CVE-2016-4329: Improper Input Validation

A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Virus software. Sending certain unhandled window messages, an attacker can cause application termination and in the same way bypass KAV self-protection mechanism...

PT-2017-8476

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus affected versions not specified Description A local denial of service issue exists in the window broadcast message handling functionality. By sending certain unhandled window messages, an attacker can cause the application...

McAfee VirusScan Enterprise Console Security Bypass Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software.McAfee VirusScan Console is one of the consoles. A security vulnerability in the McAfee VirusScan Console mcconsol.exe of McAfee VirusScan Enterprise allows a local attacker to bypass restricted self-protection rules by turning off...

CVE-2016-4534

The McAfee VirusScan Console mcconsol.exe in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 8.8.0.1546 on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles...

CVE-2016-4534: Undefined Security Weakness

The McAfee VirusScan Console mcconsol.exe in McAfee VirusScan Enterprise 8.8.0 before Hotfix 1123565 8.8.0.1546 on Windows allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles...

PT-2016-6008

Name of the Vulnerable Software and Affected Versions McAfee VirusScan Enterprise version 8.8.0 before Hotfix 1123565 8.8.0.1546 Description The issue allows local administrators to bypass intended self-protection rules and unlock the console window by closing registry handles. This is related to...

Security Bypass Vulnerabilities in Multiple McAfee Products

McAfee Active Response MAR is a product of McAfee, Inc. and is a suite of endpoint threat detection and response solutions. McAfee Agent MA is a client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. McAfee Data Loss...

Outpost Bypassing Self-Protection using file links Vulnerability

Hello, We would like to inform you about a vulnerability in Outpost Firewall PRO 4.0. Description: Outpost protects its files and forbids other applications to manipulate them. Files and directories in its installation directory are guarded by various SSDT hooks. However, the implementation of th...