Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-8308

Опубликовано: 27 апр. 2017
Источник: nvd
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*
Версия до 12.3.2279 (включая)

EPSS

Процентиль: 71%
0.00685
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components.

EPSS

Процентиль: 71%
0.00685
Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-269