CVE-2019-17093

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8

published October 23, 2019

CVSS
—
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process (PPL) and might bypass some of the self-defense mechanisms. This affects all components that use WMI, e.g., AVGSvc.exe 19.6.4546.0 and TuneupSmartScan.dll 19.1.884.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.4th percentile
Published
2019-10-23T16:59Z
EPSS history
Timeline
  • 23 OCT 16:59Z
    An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8
    cvelistv5