In the following blog post we will talk about the AVG Antivirus, but it also affects the Avast Antivirus because the core code for all the editions of Avast Antivirus and AVG is shared so all of those products behave the same way.
AVG Antivirus / Avast AntivirusĪVG Antivirus and Avast Antivirus are both maintained by Avast Software.
Note: In order to exploit this vulnerability, the attacker needs to have Administrator privileges. Particularly, we will show that it was possible to load an arbitrary unsigned DLL into multiple processes that run as NT AUTHORITY\SYSTEM, even using Protected Process Light (PPL). In this post, we will demonstrate how this vulnerability could have been used in order to achieve self-defense bypass, defense evasion, persistence and privilege escalation. SafeBreach Labs discovered a vulnerability in all of the editions of Avast Antivirus and AVG Antivirus.
0 kommentar(er)
