CVE-2020-10867

An issue was discovered in Avast Antivirus before 20

published April 1, 2020

CVSS
—
EPSS
2%
Percentile
82.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky bypass is lurking in Avast Antivirus! Unprivileged processes can exploit the aswTask RPC endpoint when Self Defense is on. 🔥 Think of it like a secure office with a locked door, but a crafty delivery person can just slide under the door to drop off packages without needing permission. That's what's happening here with untrusted processes accessing tasks! An untrusted process could gain access to sensitive tasks, risking unauthorized control over your security settings. This could lead to data leaks and compromised security configurations, leaving your device vulnerable to further attacks!

Put simply

Think of it like a secure office with a locked door, but a crafty delivery person can just slide under the door to drop off packages without needing permission. That's what's happening here with untrusted processes accessing tasks! This vulnerability allows attackers to bypass access restrictions on tasks in Avast's TaskEx library through the aswTask RPC endpoint, even when Self Defense is enabled.

What to do

An untrusted process could gain access to sensitive tasks, risking unauthorized control over your security settings. This could lead to data leaks and compromised security configurations, leaving your device vulnerable to further attacks! Update your Avast Antivirus to the latest version to patch this issue and ensure that your access controls are functioning correctly. Regularly review your system’s security settings to bolster defenses. It's crucial to keep your antivirus updated! You've got this! Stay on top of your security game, and you'll keep those threats at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02216 · 82.5th percentile
Published
2020-04-01T17:06Z
EPSS history
Timeline
  • 01 APR 17:06Z
    An issue was discovered in Avast Antivirus before 20
    cvelistv5