CVE-2017-8308
HighSummary
In Avast Antivirus before v17, an unprivileged user can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components.
Risk Assessment
The organization may be exposed to malware attacks that could exploit this vulnerability to bypass security measures and take control of the system.
Recommendation
It is recommended to update Avast Antivirus to the latest version to mitigate this vulnerability and implement additional security measures to protect against unauthorized access.
Other vulnerabilities in Avast Antivirus
See all- CVE-2017-8307Critical
In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete arbitrary files. This vulnerability is exploitable by any unprivileged user when Avast Self-Defense is disabled.
- CVE-2020-20118Medium
A buffer overflow vulnerability in the aswSnx.sys driver of Avast AntiVirus before version 19.7 allows a local attacker to cause a denial of service (DoS) via a crafted request.
Original NVD description (English source)
In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of the Avast product. This bypasses the Self-Defense feature of the product, opening a door to subsequent attack on many of its components.