An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process (PPL) and might bypass some of the self-defense mechanisms. This affects all components that use WMI, e.g., AVGSvc.exe 19.6.4546.0 and TuneupSmartScan.dll 19.1.884.0.
References
Link | Resource |
---|---|
https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses | Exploit Technical Description Third Party Advisory |
https://safebreach.com/blog | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2019-10-23 17:15
Updated : 2024-02-28 17:28
NVD link : CVE-2019-17093
Mitre link : CVE-2019-17093
CVE.ORG link : CVE-2019-17093
JSON object : View
Products Affected
avg
- anti-virus
avast
- antivirus
CWE
CWE-427
Uncontrolled Search Path Element