This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Avast First view 2016-11-03
Product Free Antivirus Last view 2020-06-29
Version 11.1.2261 Type Application
Update *  
Edition *  
Language *  
Sofware Edition *  
Target Software *  
Target Hardware *  
Other *  
 
CPE Product cpe:2.3:a:avast:free_antivirus

Activity : Overall

Related : CVE

  Date Alert Description
5.5 2020-06-29 CVE-2020-13657

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.

7.8 2019-03-21 CVE-2018-12572

Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.

6.7 2017-03-21 CVE-2017-5567

Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Avast process via a "DoubleAgent" attack. One perspective on this issue is that (1) these products do not use the Protected Processes feature, and therefore an attacker can enter an arbitrary Application Verifier Provider DLL under Image File Execution Options in the registry; (2) the self-protection mechanism is intended to block all local processes (regardless of privileges) from modifying Image File Execution Options for these products; and (3) this mechanism can be bypassed by an attacker who temporarily renames Image File Execution Options during the attack.

5.5 2016-11-03 CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email Server Security v8.x.x allow attackers to bypass the DeepScreen feature via a DeviceIoControl call.

CWE : Common Weakness Enumeration

%idName
33% (1) CWE-427 Uncontrolled Search Path Element
33% (1) CWE-312 Cleartext Storage of Sensitive Information
33% (1) CWE-254 Security Features

Snort® IPS/IDS

Date Description
2019-04-02 Microsoft Windows Avast Anti-Virus local credentials disclosure attempt
RuleID : 49325 - Type : FILE-OTHER - Revision : 1